Plugin and theme vendors DDOSing each other via their WP plugin code (that is, via your WP site), where one vendor is supposedly selling other vendor's plugin/t

Plugin and theme vendors DDOSing each other via their WP plugin code (that is, via your WP site), where one vendor is supposedly selling other vendor's plugin/theme, is a thing [1] (2019), so idk where you get the notion that things have changed ;) The whole "plugin" idea, where customization code can basically modify and monkey-patch whatever functionality it desires, has to go away, in WP and elsewhere. SGML has a concept of declarative pipelined markup stream processors to decorate and augment base HTML in a structured and bounded way. A "theme" should ideally only consist of CSS not arbitrary PHP. But I guess WP is a lost case, and has been for 20 years, in this regard. [1]: https://www.jemjabella.co.uk/2019/security-alert-pipdig-insecure-ddosing-competitors/ https://www.jemjabella.co.uk/2019/security-alert-pipdig-inse...