I mean, WordPress kets getting compromised left and right.

It begs the question, who is at faulty here??

I would never run a piece of software that either itself gets compromised or the tons of plugins it sometimes depends on.