Your WordPress website does not have security automatically installed of setup when it is created. Most website designers don’t understand security because it just not part of what they do. Security is about knowing the technical side of everything, such as how your server works.