Yes, but could you write secure code from the ground up without covering it with a plugin of some sort? Plugins will only get you so far; true security requires your backend code to be just as secure.
Certainly it depends on how the customer wants to pay, we do what the customer wants if he wants to save time and money we have to support him.
If you want a job well done we do the backend code, but it costs more money and time, depending on what the customer wants, make a website for yourself it is not how to make a site for another person who needs time and money different .
