The web server can be hacked so it serves something other than the static HTML you uploaded but there is no 'app' to hack, there's a whole class of problems tha

The web server can be hacked so it serves something other than the static HTML you uploaded but there is no 'app' to hack, there's a whole class of problems that can happen on WordPress that can not happen with static sites. What would hacking an HTML file even mean.