[zener79]

> it allows you to not update immediately to patch a vulnerability, because the site is not the one publicly accessed?

Exactly. You can never update a vulnerable plugin if you don't want to.

[stephenr]

Right. Doesn't this just make your "admin" site the target then?

[zener79]

The "admin" lives in a random-generated subdomain, is basic-auth protected and is alive only for the time needed for the editor to make the changes through the dashboard. For the rest of the time WordPress simply doesn't exist.

[spleenteo]

brilliant