Now I know that the Drupal community has a strong attitude against allowing automatic updates as a core feature, but excluding it is a deal breaker for me. I have spent hundreds of hours with drupal with joy until reality kicked in and I realized that it is just not practical for me to use for any site of significant value. It came to a point where the cms would break almost every 15 days, and required at least 6 - 12 hours of extra work to safely transition from the rapidly outdated versions of drupal. In the past I had almost been an evangelist preaching the underestimated value of the drupal cms. If it's true that Drupal is used by millions of people then it's likely that millions of man-hours are being wasted in frustration on this with many thousands of sites going extinct because it is too much work to maintain.
WordPress is a practical solution as it offers automatic updates. Could you imagine what would happen if Microsoft Window's was incapable of having automatic security patch updates and upgrades? Microsoft can do it, WordPress can do it, Drupal 8 and Dupal 9 ought to be able to do it. It's not a matter of it being too difficult, it's just a matter of being stuck in old habits and being unwilling to change.