We’re developing https://bluocms.com/

- very hard to hack because we pre render all assets to a Cloudflare kv store

- public website and CMS editor are on different domains

Basically very hard to hack. Also as a bonus is much more reliable as it will only go down when Cloudflare does.