Use a static site generator to the extent that you can. But, honestly: I think you'd stand a good chance of doing better than Wordpress starting from scratch. There are a couple of very difficult design decisions embedded into Wordpress that make life much harder for them than it needs to be for you.
For one, a built-in theme editor that exposes you to remote command execution in the presence of another vulnerability, such as cross-site scripting (XSS).
For another, an integrated comment system that stores credentials for anonymous Internet users in the same data structure as the one used for site administrators.
Comments
Use a static site generator to the extent that you can. But, honestly: I think you'd stand a good chance of doing better than Wordpress starting from scratch. There are a couple of very difficult design decisions embedded into Wordpress that make life much harder for them than it needs to be for you.
What are those "very difficult design decisions embedded into WordPress that make life much harder for them than it needs to be for you" prey tell?
For one, a built-in theme editor that exposes you to remote command execution in the presence of another vulnerability, such as cross-site scripting (XSS).
For another, an integrated comment system that stores credentials for anonymous Internet users in the same data structure as the one used for site administrators.