I feel like a lot of people using WordPress solely for blogging can transfer to Jekyll or Hugo, and lose nothing. There’s a setup process involved, but you can’t get hacked with static pages.

For the rest there’s always the far more top-heavy Drupal.