Why a set-and-forget site costs you more than you might think, what the recent wp2shell WordPress flaw teaches us about it, and the checks you can run yourself today.