WordPress gets compromised through its plugin ecosystem, not through WordPress core itself. Here is the architectural difference.
Core Web Vitals are not a nice-to-have anymore — they influence rankings directly. Here is what actually moves the needle.