Technical choices, themes, and plugin engineering practices for WordPress site building.
Note: If LCP is passing but TTFB is high, the server response is slow (a regional/caching issue). If TTFB is normal but LCP is high, the front-end resources aren't optimized. You need to look at both numbers together to pinpoint the bottleneck.
Automated attack scripts scan for "vulnerabilities," not "fame" — the smaller the site and the weaker the defenses, the more likely it gets caught in a mass scan. WordPress is a major target because of its huge user base and complex plugin ecosystem. Most sites get hacked not because they're "targeted," but because they're "undefended."
Most overseas-facing sites go with the first two options. The third (multisite) suits scenarios where each language is run completely independently, but it comes with the highest maintenance costs.
When WordPress is the best choice (most B2B companies going global): the team has no dedicated front-end developer, and marketing staff need to update content themselves; the site is a "product showcase + blog + inquiry form" setup with no complex applications; the budget is limited, and the plugin ecosystem can cover essentials like multilingual support, SEO, and forms.
