[jasonbarone]

Even with WPengine, security issues are a very common thing. WPengine can keep some things up to date, but plugins and themes are exploited often. Worse, an enterprise deployment at scale is a huge nightmare. Exploiting WP sites on HackerOne can be a very profitable business for many.

[XparXnoiAx]

Not to mention, it doesn't matter if things are kept up to date when Wordpress takes months to issue a patch for critical security problems.