Other solution: don't use a CMS that mixes plugins code with the core code with absolutely no sandboxing or even a separation between the core and the API.
Truly want to know because I don't know the answer!
If they aren't, I apologize because I don't got a recommendation for you.
The key thing is: you don't have to run it yourself.
For almost all users, wordpress.com is the answer. Automattic take care of all the rubbish for you.
If you're fussy about themes, there are any number of third-party providers who will give you more wiggle room than wordpress.com but take care of the tedious rubbish for you.
If you really want to run it yourself, there is a huge ecosphere of designers, consultants and sysadmins.