[debacle]

There may be. WordPress is not ironclad and Reddit is a big target.

At the very least, there's value in whitelisting IP access to the wp-admin login.