I definitely agree with your point about everyone creating a CMS. I wish I had an answer for you - and like Windows yes I wish more people would migrate to a di

I definitely agree with your point about everyone creating a CMS. I wish I had an answer for you - and like Windows yes I wish more people would migrate to a different OS too. There is Ghost, but I think more recently they are becoming more corporate too. However Ghost, unlike Wordpress is built on Node, which is more secure by default. It's similar to Java, in that the request handling is done by passing specific things around - in PHP everything has access to the request - every bit of code is able to do whatever it wants. So when you build a plugin system in PHP, you're giving your plugins a HUGE surface area. In non-PHP CMS's you have the ability to build a better system. You can isolate what the code is allowed to do. It's not perfect either, but there is a big different between Facebook writing PHP where the corporate can control the rules and its coding standards and Wordpress where people across a large spectrum of coding experience are providing a plugin that can, basically hose the entire website. (And edit to clarify - yes Ghost would have plugins with a wide range of coding experience, too, but remember there is a very different exploitable surface area here.)