It still uses PHP which I’m comfortable with. It has a brilliant editor. It has brilliant plugins. In its default state it is very customisable. I have a few very low traffic sites - one hit the front of Hackaday [1] - but using a static site plugin I didn’t have any issues at all.
I’m still dubious about installing plugins willy-nilly, and I usually keep to the default themes for a bit of added security, and I’ve had some issues in the past with unauthorised access but my site is pretty resilient to attacks now thanks to some custom coding.
[1] - https://hackaday.com/2020/09/23/displaying-incoming-server-a...