[FAKEDETECTOR]

This statement can not be left on HN without contradiction. It says more about your dev experience than about Drupal.

Drupal is still horrible. They did not learn from the security issues of the past, they still put lots of php files into document_root, just to mention two basic things.

They are doing it wrong in many ways, and there is no hope the "community" will ever learn, because people with competence already moved away long time ago.

Let a developer with some experience with different languages and frameworks (Java, Ruby, Python, Elixir) - not some single-eyed PHP-only beginner - work for one day with Drupal and then ask her what she thinks about it.