[PrimeMcFly]

> The only buggy or insecure code is really from third party plugins and themes. Wordpress core has been rock solid.

Rock solid? I don't really trust the codebase at all, and generally you need at least some plugins.