I'm not a crypto expert but how would that have solved this?

1. Make a website 2. Website has trusted code 3. Code update adds a virus

How do your suggestions fix those? Not trying to be dismissive I work on zero trust security perhaps I'm missing something crypto has to offer here?

I think you're behind the times, you need to replace "crypto" with "AI" now.

> I used to think that HN is full of enlightened open minded people who are open to correcting misconceptions if presented with new evidence, and adopting better practices.

Well, I don't think the average HNer has much of a say in how WordPress is operated, or even uses WordPress by preference.