It doesn't store sensitive documents, so that's probably okay. And WP security has gotten much better over the last decade, so maybe it won't be defaced?