I feel this post is somewhat misguided. Any framework or bespoke code is only as good as the developer who made it, and installed it. Recommending somebody use Ruby rather than PHP because you dislike one CMS is a bit extreme. SFTP is completely fine. I doubt many if any are still using plain FTP. Most sites will be updated automatically with SVN or GIT though - no reason why updates to WordPress should be different from any other code base. It's important to remember that a fresh install is designed to be easy for beginners. A professional obviously has to make some changes, such as pretty URLs. The reason why this defaults to ids is because some hosts don't allow changes to Apache with .htaccess - enabling it by default can lead to server errors. It's completely normal for any Framework to have the basics and require plugins / components. Suggesting that this means WordPress alone is poor because of it is not constructive. Yes you should install caching and security plugins. Yes hiding file extensions and server architecture is a good thing - by hiding these things you make it less likely to be a target for hacking. A good WordPress blog doesn't look like a WordPress blog at all when you look at the source code. Having these things exposed by default is standard, not incomplete. I do want to remind everyone that web development is a professional career - if you're complaining about the tools not being good enough in their default state then who are you complaining to? Yes, WordPress is a good solution for blogs and simple CMSs. No, it's not brilliant at everything. In response to " learn how to write a proper website instead " I wholeheartedly agree - learn how to make a full, accessible, responsive, optimised, secure website. From scratch. No frameworks. Regardless of whether or not you use frameworks in your day to day development, being technically able to write the framework yourself will make you a much, much better developer.