Maciek Palmowski is on the podcast today to discuss his WordCamp Europe presentation on whether "secure hosting" lives up to its claims in the WordPress ecosystem. He described penetration tests of multiple providers, revealing that the majority of WordPress-specific vulnerabilities made it through hosts’ defenses. He emphasised that simply seeing "secure hosting" on a landing page means little without WordPress-aware security layers. He also talks about the fact that different hosts using the same tools still produced different results, and that bold security claims in marketing often mask deeper shortcomings. The episode also touched on AI’s amplification of threats and why transparent security conversations matter.