My goal was to be more secure than an out of date wordpress site - which I think I have achieved.
I don't really understand the harm that can come from an email/password/ip leak, besides spam or stolen accounts if they reuse their password. Do you have a link that might impress the seriousness of the situation on me?