I misread the comment -- I thought they were saying that Wordpress was insecure and the plugins were secure. Never mind.