Wanted to reach out on this forum to hopefully gain some insight into our pending website updates. We have solicited a few web design companies that have said they want to use Wordpress. We have heard that Wordpress has vulnerabilities with the code. We really want to have something that is secure, so we started looking into Drupal.
Is Drupal a good fit for us? Our main goal is to have a website that we can update and maintain on our own, but ultimately is a safe and secure solution.
There was a blog post by Varun Arora, "Why we stopped using Drupal for our platform", which had got considerable attention when it was posted in 2013. There are 126 comments so far. The point being made was the Drupal has a lot of complexity, under the hood, and if you want something that is not available "out-of-the-box", in the core or in a well-established module, then you have a very rough and steep learning curve.
I am looking at revamping a set of sites from ASP to Drupal. I like a lot of what I see in Drupal, but have two concerns:
1. In reading about Drupalgeddon, it seems that the problem was that many people didn't even see the security notice before hackers started exploiting the vulnerability. I have no staff, so this means I need to be available immediately to install security updates when they are announced. I don't know that I want to be chained to my websites that way, or leave them potentially vulnerable if I decide to go on vacation for a month.