I happen to have managed to move a website from a PHP-based CMS to static HTML for someone earlier this year… it's clunkier than I'd like, but it works and it's definitely safer now.

Make sure to check your routers and VPN appliances and limit outside access, though!