just don’t install tons of untrusted plugins and themes like you would also not do on any other platform you host.

even whitehouse.gov uses WordPress: https://wordpress.org/showcase/the-white-house/