Wordpress have same problem of being slow POS that in addition needs to be constantly updated for security issues.

Hell, we even got one of our clients (we just provided hosting for some of their stuff) getting half-hacked while setting it up (they were not exactly the developer type). Half-hacked because we required app-to-internet traffic to be ran by proxy so the final payload didn't get downloaded on the server, hilariously enough.