Few years back I heard in the Google Dev conference that they are going to partner with WP/Automattic to make it more secure among other things. What happened to it?

I feel improving the security architecture of plugin integration could go a long way. Although using lesser plugins, only from trusted developers, keeping them updated, using other security plugins(Firewall, 2FA etc.) and regular backups can help keep WP instance safe to some extent; There's absolutely no excuse or explanation for random database errors with WP and that was the final nail in the coffin for me.

I started building my own CMS using Go for complex websites and for simple websites static web pages using Hugo with markdown does the job.