During competition windows the public site carries live scores and streaming to a spectator audience, so downtime mid-tournament is a visible failure in front of the whole sport. We run monthly maintenance across WordPress core, theme and plugin updates on a managed staging-then-production cycle, so nothing ships untested. WP Engine handles server-level patching, backups and its own WAF; we own everything at the application layer. Let plugins lapse or core fall behind and known vulnerabilities go unpatched, opening the door to defacement, malware injection or a breach through to the member portal.