I've put my wordpress behind a firewall, in a docker container, and mirror it with wget to my actual webserver, serving the static files. I sleep better at night.