@wfpeter Just saw this thread and I just wanted to chime in with the fact that one.com lists wordfence a popular security plugin (and hence recommended) plugins on their support page here: https://www.one.com/en/wordpress-hosting/how-to-use-wordpress (Search the page for “wordfence” and you’ll find it)
However, they have partnered with patchstack which is monitoring all wp sites using their own plugin (https://www.one.com/en/about/news/wordpress-vulnerabilities-repaired) so that might have something to do with it.