One advantage of not using WordPress is not having to spend a couple hours every week restoring the latest backup you have because you got hacked again.
Been running WordPress with WordFence, Akismet antispam, and CloudFlare on a site that gets a sizable amount of traffic. No hacks yet - it's not the same insecure mess it was a decade ago.
Not who you were replying to, but I helped a Luddite friend set up a wp blog 7 years ago and we had 1 minor hack about 6 years ago. It updates itself automatically so haven't really had to do much work with it.