Our library content management system (cms) has a LOT of dynamic content. But the ideas afforded in statics site generation (and Hugo as an example) help to mitigate some of those issues.
Hugo has short codes. We’ll have to explore how those could work on a live site, and if that gives hackers access to the same set of things like PHP might.
Static site generators could automatically update a static site at intervals, like hourly or daily. That could help with upcoming events, say.