I don’t think you are being fair. The average small blogger on a shared host isn’t going to be an expert in PHP. Like the poster I have seen 4 wordpress sites hacked and have just switched hosts following 2 in a year. One of these did use an outdated commercial template, the other 3 used standard templates with no plugins supposedly automatically updated at every new release.. There are plenty of simple things that could be done to make WordPress more secure including the most simple one of notifying any changes to configuration files via basic checksum. PHP as a product may be very secure but the way it is implemented by shared hosts allows for multiple infections. Security and ease of maintenance should be number one on the list when looking for a blog if you don’t want to be monitoring round the clock. I’m looking for a simple occasional blog that I can configure without a computer science degree and hopefully tweak by looking through the code. Ghost seems interesting but my host doesn’t support NodeJS
My general opinion of October is it’s basically the ugly stepchild of WordPress – and is trying *really* hard to live up to big brother. It has a lot of the right pieces in place, though like Craft it tries harder to be developer friendly, so code editing is built in to the admin, up to and including snap-ins to build your own plugins as needed, theoretically without ever jumping out to brackets or whatnot.
Imagine just letting your website sit around for a year without ever editing its content. After a year, the WordPress CMS version is old and probably susceptible to hacking. Most website builders, on the other hand, are silently updated and maintained behind the scenes by the provider. As long as your password is secure, you have almost nothing to fear.
Amongst most of the website builders, another name that comes to mind is Squarespace. The versatile builder for blogs, portfolio sites as well as online stores, has managed to rise in its popularity in the recent years. Despite the huge difference, this being a closed source software while WordPress is an open source; it certainly is a great alternative to WordPress Page builder. That’s right, for the casual users the overall functionality and the flexibility is the main aspect.
I’ve made some use of Kirby CMS. It’s a really well put together flat file CMS. It takes some coding out of the box to get it set up as desired, but then it’s a pleasure to use. Advantages of not having a database include simpler setup, and the ease of version control of the whole site. Statamic is a similar option, though I’ve not spent any significant time using it.
Maybe just like you, at first we didn't have a darn clue about how to build a website, nevermind write half a line of code if our life depended on it! We wanted to build a website to start a side business, and felt overwhelmed, confused & scared about how to actually do it, which builder to use, and making wrong decisions. After years of trials & errors using different website builders, we're here to share our experiences with you.
Why You Shouldn't Use WordPress! And Why WordPress is Bad