I handled the inherent security risk of WP's plugin architecture by meticulously monitoring the plugin-code/plugin publisher, Firewall, File changes, 2FA Auth etc.

I handled the performance drawbacks with best hardware, cache etc.

I even accepted the premium for above activities. But random database errors was the final nail in the coffin.

After a decade of WP usage, I have ditched it for good. My current web stack for the past 2 years has been -

Simple websites- Vanilla HTML, CSS, JS.

Blogs - Hugo.

Complex Web Applications with CMS - Custom Go framework.

I understand that none of the above is applicable to someone who doesn't have web-development experience, Even in that case website-builiders[1] are a better option than WP. At this point, the only reason I'm not nuclear on WP is because I believe there's a thriving economy based on WP especially from developing countries.

[1]https://startuptoolchain.com/#website-builders (Disclaimer: Mine).