I agree with all points in comment and would add: - frameworks forcing updates is good, your custom code still having that XSS for 20 years you don't even know

I agree with all points in comment and would add: - frameworks forcing updates is good, your custom code still having that XSS for 20 years you don't even know is liability not a "saving of money" - frameworks are bringing XSS protections, navigation fixes, do a lot of things better than would be done by random devs from scratch - loosing skills is just Plato saying "if kids start writing things down, their memory will deteriorate" or people who pride in writing SQL by hand that ORMs are bad and I saw enough of "proud SQL writers" making more problems for the project than helping and I still know how to write SQL and the same I could use JavaScript browser API by reading some documentation if I need to