The first time I tried to pass my main box PCI compliance I got screwed because I had too many apps installed (modx+WP+Magentoo+OpenGoo+Flyspray and so on

). now each app has it’s own plugins and modules and in many of them the scanner found security issues in the code. now go and find the patch, and the time to apply it, for all these apps.
there is defiantly is a need for specific app in some cases and not all apps are alike, but since that scan I changed my perspective and think twice before I install anything on that box.
It’s also cool to have it all in modx if you already familiar with it makes things faster than learning a new app.
blahblah.