Cheap, easy, good.

Pick two. This is how most things in life are.

Personally, I’m a fan of static sites. But, being a web developer myself, setting up a simple form isn’t a big deal.

If dynamic content is required and you’re not a developer, you are at a crossroads. You can host your own Wordpress and get hacked eventually, or pay a cloud service like squarespace or wix, etc. but you’re at the mercy of price increases and a la carte features.

To be fair to Wordpress, they’ve come a long way. The core product isn’t horrible. However, they have no way to control 3rd party code, and that’s where all the malicious stuff comes from.