Yeah the issue with WP is the bloat of CSS slowing down pages, and the big tech integration. It's got Cloudflare and Google calls on the backend. Spyware by default unless the person does active work to remove it. While as Hugo, Ghost, or other static site generators are faster and more free code wise

WordPress is a shitshow, RCEs, XSS, you name it. There are botnets with WP as the main vector. Use with caution, php = bad time.