Most of my income since 2019 has been related to WP having to be able to overwrite its own runtime files or it will yell at you for violating security best practices.
In other words: "Welcome to WordPress, where the rules are made up and the perms don't matter".