Most folks probabpy use the "render wordpress site to static site" model to avoid the security issues.