I would also be concerned with the way WP is seen in the market. Anyone that has any knowledge of the web, and how security and SEO are structured would never deploy a true business site using WP, period, no discussion.
There are far too many back-end security holes in WP to allow a business to run on that platform. Just read the white papers on the security issues associated with WP on the W3C. Look at all the security violations that were found in the add on modules to WP. Some of them put there intentionally by malicious authors. That is enough to turn off any business. But I will admit I love developers that use WP as a front end. Those sites are eventually driven to people like me or members of my University classes for re-development and trust me, it cost a lot more to restructure a site then to build one from scratch. Much of the work I do now is done restructuring poorly designed sites.
What surprises me more than anything is how many web developers will rip off customers by deploying these types of sites without telling them the risks. And charge what a good developer would charge for a custom site. The one good thing is many of those developers are not in business long as word of mouth in this industry travels quickly.
Darn, I don't even have time to update my own site because I am so busy teaching and running the development business.
Developing a CMS from scratch, is not near as difficult as people make it out to be. As a perfect example I put together a 17 hour video series that walks a person step by step through the process of building a custom Blog System. Using HTML, CSS, PHP, MySQL, JavaScript and the BootStrap framework. It will take someone that knows absolutely nothing about web development and when they finish they will have a custom CMS application. And more importantly they will know how it works and everything that is involved in the code. It implements some of the most up to date security features out there, and more importantly it follows all "Best Practices" for SEO. Which on most sites is more important than security unless you are dealing with large amounts of eCommerce.
You have to follow your own path, but with the importance being placed on SEO and the implementation of good SEO, more and more as developers learn about the shortcomings of WP, Joomla, and the rest, those applications will fall where they need to be. In the consumer market, not the business market. For small consumer sites, sites with little traffic, they work great and give individuals an opportunity to get online and express themselves. That's what they designed to do. For business sites where direct access, speed, security and search engines play an important role in their customer driven access, they have no business in that arena.
OK, I am done preaching now. I have this conversation so often with customers, I should just print our brochure and when the question comes up, just hand it to them.
I hope this helps you with our decision. There is a lot of information out there on this topic. Do some reading and make an informed decision. And always do what is best for your customers.
