I use ExpressionEngine for most of the professional sites I’ve developed over the past 10+ years or so (I think Craft is based off EE, or developed by one of the EE programmers — I forget the details). Started out with that one because it’s easy to create templates and you know exactly what’s going on under the hood. WP was not an option earlier because it was an easily hackable mess. I finally took another look at WP because 1) I’d seen so many complex, well-crafted sites and 2) ExpressionEngine got too pricy for many of my non-profit organization clients. I just wish WP code wasn’t so convoluted — it’s not elegant code, but any means, and there is way too much stuff loaded that doesn’t serve any purpose. I guess I just have to get used to it.
I don’t think you are being fair. The average small blogger on a shared host isn’t going to be an expert in PHP. Like the poster I have seen 4 wordpress sites hacked and have just switched hosts following 2 in a year. One of these did use an outdated commercial template, the other 3 used standard templates with no plugins supposedly automatically updated at every new release.. There are plenty of simple things that could be done to make WordPress more secure including the most simple one of notifying any changes to configuration files via basic checksum. PHP as a product may be very secure but the way it is implemented by shared hosts allows for multiple infections. Security and ease of maintenance should be number one on the list when looking for a blog if you don’t want to be monitoring round the clock. I’m looking for a simple occasional blog that I can configure without a computer science degree and hopefully tweak by looking through the code. Ghost seems interesting but my host doesn’t support NodeJS
I found CMS Made Simple to be very easy to template, for instance. And I used ModX for years before using WP, and it is also very easy to template, and offers a lot of nice features. They will appeal to someone who wants to develop, but is generally uncomfortable in PHP. You can mostly get by with HTML and template tags. This tends to prevent the “white screen of death”. 3 Best PayPal Alternatives for WordPress Users