I just moved my last PHP site, my personal blog, to a static site generator. It looks like my timing was lucky!

The only significant thing lost of comments, but they have been getting more spammy over the years. Its actually better now too in many ways and I fixed various issues during the move.

How do you deal with end users wanting to edit their content? They have no clue what Markdown or Git is.

Exactly!

Unfortunately my static HTML is pre-rendered by a PHP engine before being served.

Because every once-in-a-lifetime AI is invented and finds security flaws in PHP? Seems like you are coming to an overly broad conclusion here.

Because every once-in-a-lifetime AI is invented and finds security flaws in PHP? Seems like you are coming to an overly broad conclusion here. Besides, you have to serve the static HTML somehow, and Apache and Nginx have had plenty of security vulnerabilities.