This is basically true, though I'd point out that most of those themes and plugins are hot garbage minefields full of bugs and security vulns, and due to the fa

This is basically true, though I'd point out that most of those themes and plugins are hot garbage minefields full of bugs and security vulns, and due to the fact that it's all just wild-west PHP here, a nontechnical WP admin actually making use of the whole wide world of plugins and themes out there is exactly as safe as downloading absolutely any .exe you want while running Windows XP as Administrator without any firewall or antivirus software. Not disputing the usefulness of the platform, just that it's a risky thing to expose to the Internet.