I've built a few sites using wordpress for others, mainstream though. Personally only using wordpress for 400+ domain for sale pages on 1 installation. Bloated but since I have my own servers can handle the bloat. Also a target for hackers so I use Incapsula to kill off some bad bot traffic at the DNS level before it hits my servers along with using a security plugin. So wordpress requires good hosting, security tweaks and keeping core/plugins updated.
https://wordpress.org/plugins/all-in...-and-firewall/
https://www.incapsula.com/blog/14-tips-to-secure-your-wordpress-e-commerce-store.html