Can't we handle wordpress security on our own or use some plugin