"I hosted about 25 wordpress blogs on my mosso account for various friends. I kept most of them up to date, but a lot of them were for friends and were not under my control. 100% of them got owned. hah. It was just something they did. no matter how fast or often i updated the wordpress software - it would be owned at least one time. My personal blog was safe for some reason. Maybe it was because I always ran the bleeding edge version from SVN. I will not miss the constant updates and the attacks. The wordpress community does a good job of handling this issue. I, however, was tired of it."Apart from the Plone sites that I manage, I am responsible for two Wordpress sites (I'm aware of all the cautionary tales so I'm keeping those WP sites up to date, backed up, plus my fingers crossed).
Bottom-line, security matters!
If you're seriously looking into static blogging you may want to check out Ruhoh.