[ssharp]

My experience is with Pressable, so sorry if I'm assuming WPEngine is the same, but I can knock these off easily by using Pressable:

#2 - Default admin. I was given a secure admin password

#4 - Backups

#9 - Caching, and really that's an understatement.

#11 - Ignoring updates

#16 - Not using CDN

[xaviermajor]

That's awesome I will have to start recommending that.

Thanks for the tip.