Security really. WordPress was and likely still is one of the most attacked software on the planet. It takes just one malicious addon and your instance is toast, because the BEAM VM runtime is quite trusting. Zero sandboxing or any other security inside the node itself.
Yes, but that risk you also got every time you install a library too. Part of reason WP is so targeted is because it is so widely used.
(For the record, I’m not a fan of WP)
