WordPress is set up to extend the core features with plugins. Most are free. Almost are written by someone you don't know and aren't hiring directly.
This means that your site isn't just being developed by whoever you hired directly. It is also being developed by a group of other people spread out all over the world. They have varying levels of skills. They generally don't really care about you and your particular problems.
Let's carry on about how this can be dangerous.