Having had my web site hacked a couple of years ago, I abruptly lost all enthusiasm for running one, so after I locked it down, I took a few years to think about what to do. In that time, I’ve realized that for 98% of what I truly want my website to be, there is zero reason to give anybody access to changing the site from within the site itself. Even I don’t have such powers. And by not letting anybody change anything, the site can be remarkably secure against hackers. Not 100%, but much, much closer than any system that includes interactive editing features as part of the design.