Only when a client already depends on one. Our default is native blocks — faster and far easier to maintain.
Yes, starting with a security and performance audit and a written risk list.
Monthly patching with a staging test first, under a maintenance plan.
Yes — caching, image optimisation and query tuning are part of the base build.