i can't speak much about core codebase, but plugins in general written quite badly too often. These will have security issues, html/php/javascript/css spaghetti

i can't speak much about core codebase, but plugins in general written quite badly too often. These will have security issues, html/php/javascript/css spaghetti in one file. From what I understand - there is no vetting process to accept new developers, nor API forces developers write secure/readable code.