CLP need increase security in clpctl - WordPress install tutorial

[isrealbm]

In the WordPress installation, I see CLP documentation has "Reset permissions." by "clpctl system:permissions:reset www.domain.com 775".
In this case, CHMOD 755 is not secure. Authors should instruct CHMOD 755 for directories and 644 for files and 750 for document directory.
I has an website install follow this tutorial and has been hacked by attacker - Error: Japanese SEO security issues.
Also, my website has been add to Google Safe Browsing blacklist :(

Sadly to hear that, so I write this topic to notice to CLP dev teams and other who is need install WP with CLP.
CLP is good, they are not required to guide you how to secure your website. But I want to contribute my opinion to make CLP's product better.