We provide server-level security, but you are responsible for application-level security inside WordPress.