I've been building and fixing websites for over 15 years.

The people who call me in a panic almost never run Drupal.

They run the site where the plugin author disappeared. The SaaS that got bought and came back at three times the price. The build where the agency left and nobody knows how anything works anymore.

Most of the Drupal sites I built years ago are still running. Patched, upgraded, same platform.

Drupal tells you years ahead when a version ends. Since Drupal 8, moving to the next major version is an upgrade, not a rebuild. Drupal 7 was the painful exception, and the project learned from it. Security issues come out with a fix and a risk rating, so you know what to do and by when.

It's not the flashiest CMS. I don't care.

When a client asks me what will still work in ten years, I don't have to think about it.