As we all realize, WordPress itself is not an immaculate piece of code, but it's the plugin library that makes it. But we now know that even the plugins themselves are liable to hijacking from within.

While it would be nice to start from scratch with a modern, better CMS - the reality is going to be something like ClassicPress but using only premium, manually installed plugins.