Drupal powers more than 7,00,000 sites across the internet, which increases the chance of a specific site owner being vulnerable to cyber attacks. Although all third-party modules are heavily vetted, a little extra security is always a good idea.