This seems to be a Joomla-centric post. I think better advice would be to avoid all extensions that you haven't fully audited yourself, or hired an expert to a

This seems to be a Joomla-centric post. I think better advice would be to avoid all extensions that you haven't fully audited yourself, or hired an expert to audit. The mass majority of Joomla exploits are from poorly written extensions. Points #10 and #11 try to deal with this, but miss the larger point.