My understanding is that Wordpress can be hosted on any platform you choose. For example, you could bring up an Amazon Web Services EC2 instance and host a Wordpress instance on it.

The problem with Wordpress is that it has been and continues to be a sink of malware (the problems of using PHP). If you don’t keep absolutely current on the patches, you run the risk of infecting your readers with malware and ransomeware.

The prudent course if you want to use Wordpress and don’t want to put time into administering it, is to use a hosted site that keeps the installation up-to-date.

I don’t know what solutions exist for comments. I do know that without filtering comments become overwhelmed by spam comments. Perhaps the sites that host Wordpress provide a comment filter.