So, after getting my second Drupal critical attack warning in 5 years (or so), I thought: enough’s enough. This CMS stuff is too big a hacker target and too fragile. Time to replace Drupal with something like Blosxom or something else lightweight and small. A little bit of research showed that the new thing was static site generators, where a suite of tools help you generate your site (and help manage the blogginess) on your development platform (aka. home computer) then push the changes out to the web server, all as static pages. The fact that all the points on this devil’s advocate list of why not use a static site generator all sounded good to me meant I was on the right track.