Just let me add a new feature to this Wordpress site, I'll just enable debugging to see if it produces any errors.

TURN IT OFF!! TURN IT OFF!!

All I could see was error upon error upon error. Mostly from old and not updated plugins.

I'll just leave it there till client decides they want a new rebranding and start from scratch

@Letmecode I didn't make this site, only added a new feature to it.
Though most sites we make use Wordfence, for an added layer of security.
And for the big clients, wp-admin is restricted to our and the clients IP address (nginx level)

Whenever I make sites, I remove all traces of it being wordpress (not using wp-content, remove all tags that shows it being wordpress and remove http headers that contains wordpress)

That's a common practice for me, remove all traces of what might host the website.
I have a custom X-Powered and server header
https://i.bratteng.xyz/zxYuss42L3.p...