Lock down your WP install within your VPC & serve the static pages from S3.

If you do have a dedicated engineering team, the trend now is using headless cms (sanity or contentful) and a ssr platform (Next.js or any of the traditional frameworks).