No CMS that becomes vulnerable
A CMS is software with a login, a database, themes and often dozens of extensions. Every part can need attention to stay secure and keep working properly. A well-built static site does not have that: fewer moving parts, less risk of unexpected obligations. You do not pay for a cycle of updates just because the system demands it of you.