The interesting thing about WordPress is that it's one of the few cases where an alternative is vastly more secure while providing similar functionality - namely, any blog software that exports a set of static HTML files.
It's not perfect, since any of the listed breakin methods not directly related to a WordPress vulnerability is still available, and you have to make sure your control panel is actually secured the way you think it is, and if you use a service like Disqus for comments you theoretically gain nothing, since you're just outsourcing your security to someone else's webapp running arbitrary JavaScript in your domain...
But in practice, using static publishing is an excellent compromise: PHP webapps are probably one of the least secure categories of software in existence, especially compared to relatively secure OS services; it's usually easier to update the OS, and all updates come from one place; and the same solution also happens to be vastly better performing if your site is under load.
I don't think static site generators are suitable for most WordPress uses - the key feature is to allow non-technical users to easily add content and publish immediately which WP does very well. Teaching them Markdown (or similar) and some CLI is not an option.
It's not perfect, since any of the listed breakin methods not directly related to a WordPress vulnerability is still available, and you have to make sure your control panel is actually secured the way you think it is, and if you use a service like Disqus for comments you theoretically gain nothing, since you're just outsourcing your security to someone else's webapp running arbitrary JavaScript in your domain...
But in practice, using static publishing is an excellent compromise: PHP webapps are probably one of the least secure categories of software in existence, especially compared to relatively secure OS services; it's usually easier to update the OS, and all updates come from one place; and the same solution also happens to be vastly better performing if your site is under load.