Don't Critics hide under the authoritativeness of "best practices"? What is whatever they think and agree with. The critics think they're authoritatively right,

Don't Critics hide under the authoritativeness of "best practices"? What is whatever they think and agree with. The critics think they're authoritatively right, as if they know what is best in all cases and scenarios. (But they're not the ones who did the work.) An authoritative source of accomplishment or demonstration is more valuable than someone with no skin in the game, or who doesn't even contribute even if what they say is true. Wordpress has had security issues, I didn't mean to say popular = good. What I meant is that I trust the wordpress developer's ability to know how to write software that works than someone who doesn't know how or has ever written successful software but knows how to avoid security issues. Don't let perfect be enemy of the good :-) What would you prefer or listen to more? More developers capable of writing wordpress-successful products or more developers who can criticize but can't build anything. You could listen to the wordpress developer's attitudes on software development but you wouldn't take their security advice. Maybe you would ignore the criticizer's criticism on how to build software.