Wordpress support Oauth authentication - https://developer.wordpress.com/docs/oauth2/
It would be to have this since then it won't be necessary to
authenticate with user and password store in config.
This would also require the XML-RPC calls to be replaced with calls to the REST API. This is a WONT FIX, as of now.