And if it's a website promoting a local tree planting initiative or whatever is it really a good use of budget to get everything hardened so much.

Given the fact lots of sites like that have Wordpress 'databases' of form submissions full of people's personal data, absolutely definitely emphatically yes.