One-click updates are great, if you happen to be logged into your site that day. You need to subscribe to the announce list and get the info sooner for days wh

One-click updates are great, if you happen to be logged into your site that day. You need to subscribe to the announce list and get the info sooner for days when you are not. Same as with any CMS. And I never said there was a problem with expecting people to keep their software up to date. Just that it doesn't happen automatically. People have to do it. And I know a lot of people with outdated Wordpress installs. That's the reason behind the recent news of 60,000 Wordpress sites being hacked. Wordpress is pretty secure if you keep it up to date and monitor when updates happen. But saying it is 'insanely secure' is simple ludicrous.