> It's like a car, motorcycle, bicycle, etc. you need to spend the time to change the oil, check the tire pressure, and all those little things that are simple

> It's like a car, motorcycle, bicycle, etc. you need to spend the time to change the oil, check the tire pressure, and all those little things that are simple but necessary ... otherwise it get rotten with time. Agreed. Or else pay significantly more for a managed WordPress server, but even those aren't immune to security issues, as we saw recently with WP Engine. The most secure option by far if you don't serve dynamic content (that would require a login, for example) is to use a static site generator and serve it via Github, S3, or Netlify. Or even your own Nginx (only slightly less secure as long as you understand Nginx and SSH and how to mitigate any potential security issues).