[rograndom]

To be honest, the majority of the CVEs are for 3rd party plugin and themes that no rewriting of core will fix.

[jolux]

They couldn’t be fixed by making the plug-in model more structured and restrictive?

[mgkimsal]

You could, and I think it would help. It would also shift the type of themes/plugins we see, because the discipline in making compatible themes/plugins would weed out certain types of producers.