Website VS multi-site-app

I think you can see it in different ways (Do not trust Essentials' PSA "Do not use mohist"), but I prefer to know what I am running. The idea to replace files with compatible ones is a security issue, but I admit I would have done it the same way if I ran into this problem. My bigger problem with Mohist is the mentality, eg. that they tried to change Essentials' PSA into an ad (Pull Request - Reference). But I think, if mohist works well for you, and you (if possible) do not replace the plugin jars by Mohist's, it is okay to use. It is just something you should be aware of.

so yes

Magma has a dev who exploits the log4j rce thingy. Mohist replaces plugin with arbitrary unknown code, then tried to advertise themself by submitting a PR to EssentialsX's Mohist PSA github

Thanks for mentionning DataTig, it wasn't exactly what I had in mind first (me being a bit over-focused on datavisualisation) but DataTig's approach is indeed quite smart. In that field I'll add in my coop we also have a project building a full frontend website from a repo (from md/yaml files) : https://github.com/multi-coop/multi-site-app. We currently use it for two websites, but it's a quite recent project we didn't document very well so far.