Yes. WordPress itself is generally secure. Most security incidents happen because of outdated plugins, weak passwords, or poor website maintenance practices.