Exactly. Wordpress (plus plugins) is too much of a liability to host yourself. Personally use wpengine.com with comes with tools to keep Wordpress updated with the latest security patches automatically