WordPress is a good CMS, but it generally receives bad reps for being vulnerable to security vulnerabilities and not having an inherently secure platform to use for business. Therefore, it is good to secure WordPress sites to keep hackers away from them.