The only buggy or insecure code is really from third party plugins and themes. Wordpress core has been rock solid. Ya you still need to setup caching and there’s some modifications to run it at scale but that’s all a solved problem thanks to the likes of Automattic and their VIP platform.
How much of the rest of the web are using third party dependencies in their code?
We’ve built sites for a very large social media company where everything had to be audited before production including third party plugins. WP VIP has a list of plugins they’ve vetted and/or applied their own patches to secure.
You can get a kimsufi server for $6/month, and there is plenty of cheap hosting offering django, pretty sure you can even find python hosting for free up until a point.
It depends on who you listen to. Non coders seem to love Wordpress. I worked in a place with a Django booking site and a Wordpress marketing site. The other two devs knew PHP, while I know python, they advised me not to learn it and to stay away.