I have seen countless £millions spent on websites over a 10 year career in web that could have been achieved - without compromise - with WP+yoast.
The websites I'm thinking about, though, tended to be marketing websites ('microsites') for large consumer brands, that really didn't do a great deal functionally, and didn't need particularly robust security in the grand scheme of things.