I know people that use a similar approach (albeit) with git. Comments are hosted on Disqus so the entire site is essentially read-only. WPSuperCache is used on

I know people that use a similar approach (albeit) with git. Comments are hosted on Disqus so the entire site is essentially read-only. WPSuperCache is used on a staging server and the actual public-facing website serves up static pages that have been git pulled from the cache. The Apache process on the public-facing server only has read permissions to the public site files.