>Put a server on the web that isn't hardened properly It's easy. Just don't do/enable dynamic things. There's no need for anything more than a static webserver

>Put a server on the web that isn't hardened properly It's easy. Just don't do/enable dynamic things. There's no need for anything more than a static webserver in 99% of cases with personal websites. And static webservers ship very secure by default. There's not a lot of remote exploits in nginx or the like. It's much more risky to use a web browser with javascript enabled.