Secure, deployable CMS without DBs or headless APIs, fully customizable with HTML/CSS/JS

Good grief - why is it so hard to get a good, decent CMS that doesn't require traditional hosting (no databases, no insecure flat-file), is properly customizable using HTML/CSS/JavaScript code, and doesn't require the headless/API crap that NEVER WORKS RIGHT?