WordPress has
an affinity for back–doored radioactivity.
If I can get my way (which is hard), a WordPress install has only 1 theme and
0 plugins.
wordpress/
|-- public
`-- wp-config.php/* Disable installing plugins and themes */
define('DISALLOW_FILE_MODS', true);