Every day is an adventure. This guide for installing wordpress suggests to use randomness from wordpress.org. Centrally generated randomness is the digital panopticon par excellence. Not that anyone is using it—but they could be.
Uptodate software is paramount for security, so is restricting the file access rights of the webserver. Apparently wordpress administrators have to choose between the two.