A static webserver is just the webserver in my mind. If you use something like nginx you are only going to be surprised by a remote exploit about once every two

A static webserver is just the webserver in my mind. If you use something like nginx you are only going to be surprised by a remote exploit about once every two decades. Yeah, if you use some sprawling set of 'apps' that use things like Log4j on top of your server you're exposing attack surfaces.