If you really want to avoid updates and viruses, you need to go static. There's hundreds of static site generators out there.
I recommend [1] hexo, for it's simplicity. You can write in markdown files and generate a static blog for static hosting.
But [2] Gatsby is another similar framework, but it uses React.
[1] https://hexo.io/