A certain local bank asked me to power their website and I chose WordPress. I understand that WordPress has good core security though there's insufficient security for themes. When I consulted a friend he said that the themes and plugins can be manipulated and therefore not suitable for a bank website. What do people in this forum have to say? Is it such a bad idea?