It’s OK not to use tools
m.signalvnoise.com
m.signalvnoise.com
I don't do outside work so my feelings are more just my gut and not based on direct experience. But having migrated several university blogs away from wordpress into the cms I know I sleep better at night not worrying about wordpress vulnerabilities. We have had several WP blogs successfully attacked and getting them back to a proper state was just terribly complicated.
We really need easy tools for small sites (maybe <50 pages, or simple blogs). Static publishing for those with a little technical bent are useful but for others not really approachable.
Recently I have been looking at http://dodgercms.com/ and a recently cloned derivative https://bitbucket.org/matthewdlevy/drafty. Both are not really ready for prime time and set up requires a little knowledge of AWS but once set up, creating a small site is pretty easy.