Assuming your WordPress is fully secure, you still have your Apache, FTP client, MySQL and any software that runs on your server that you have to worry about. Your website is only as safe as its weakest link. And that includes the quality of your host’s software, the themes and plugins your websites operate on.