That used to be true, but the i things (which run the same OS with a somewhat different GUI) probably put their installs well ahead.It's like Microsoft and Apple. MS got hacked all the time because the user base was huge compared to Apple.
Similarly with Android and Linux, although the entire GUI level is different to desktop Linux. In a terminal its very similar. ChromeOS is just a fork of Gentoo Linux. On top of that, Linux runs a lot of servers that are high value targets. The very high value ones, like banks and big tech companies, are pretty well secured, but there is an awful lot in between those and desktops that are frequently no better secured than the average desktop.
I think @antropy is right, in real life, you will find a lot of people do not do updates, and do use themes and plugins with security holes. Look at the number of people who come here and ask about what to do with a website that no one has updated for months or ever years. The API is not particularly helpful in developing secure plugins and themes either.
The important thing is not whether it is the fault of Wordpress or not, but whether painting a big target on yourself is a good idea.
BTW @antropy what CMSs do you like other than Concrete?
Last edited:
Upvote
0
