Seriously - there's always some attack vector. I got notified a few months ago that an old static blog on one of my personal sites that I had totally forgotten

Seriously - there's always some attack vector. I got notified a few months ago that an old static blog on one of my personal sites that I had totally forgotten about was hacked (bad permissions + some feedback form). Most web hosts have some form of caching available to customers so the concurrency argument doesn't hold up well either.