I've had a Wordpress blog for about 25 years. This makes me want to turn off automatic updates, since I'm worried he might just go nuclear and flip some sort of kill switch that bricks every blog, or push some ridiculous anti-Wordpress Engine banner to every installation. Of course, not keeping WP up to date is very risky as well. I'm not even insensitive to his position, even though I don't know full details. But, h…
I'm not sure if Debian's packages are kept up to date with security patches, though. The latest changes to the wordpress package[0] were in December 2022 and and May 2024.
[0] https://metadata.ftp-master.debian.org/changelogs//main/w/wo...