Using AI For Package Selection: Blind Faith Needs Guardrails
Part 2 of our Website Rebuild series. Read Part 1: What Your Website Actually Needs
"What's the best technology for running our business website? We publish articles every week or two, post some hiring announcements, and need customers to find us and use our contact form."
AI's answer: "WordPress is the most practical choice. Your IT team can maintain it without being developers. Massive plugin ecosystem for anything you need. Easy to find help and tutorials. Stable foundation for 4+ years. Budget $100-300/month for good hosting, security, and backups."
Sounds reasonable, right?
Here's what actually happens:
- Month 1: IT team spends 8 hours learning WordPress, choosing plugins, configuring security
- Month 3: Security update breaks contact form plugin, 4 hours to troubleshoot
- Month 6: Marketing wants to update homepage, spends 2 hours trying to figure out page builder, emails IT anyway
- Month 9: Another security patch, another plugin conflict, another afternoon lost
- Month 12: New marketing person needs training on WordPress, 3 hours of IT time
- Ongoing: Every content update still goes through the "website person" despite the promise of self-service
The hidden costs:
- People time: 40+ hours per year at $75/hour = $3,000+
- Hosting: $200/month = $2,400/year
- Premium plugins: ~$500/year
- Total first-year cost: $5,900+ plus ongoing headaches (security patches, plugin conflicts, training)
What you actually needed: A website that publishes articles and has a contact form. That's it.
This is the AI trap: recommending what's "standard" instead of what's tailored to your needs.
AI has been trained on millions of technical discussions, Stack Overflow threads, and developer documentation. When you ask for recommendations, it defaults to what's most commonly discussed—which tends to be enterprise-grade solutions for enterprise-scale problems.
The disconnect:
- AI learned from Fortune 500 implementations
- You're running a growing business with practical needs
- What works for Amazon doesn't work for you
Example from our rebuild:
If we asked: "What's the best way to let marketing update website content?"
AI would suggest: WordPress or similar CMS with user roles, content approval workflows, and training for the team.
What we actually needed: A way for our marketing manager to prepare content without technical knowledge.
What we built: Simple preview system. Marketing edits text files, sends preview link for approval, we publish in 30 seconds.
The Broken CMS Promise: "Everyone Can Update It Themselves"
This is WordPress's biggest selling point—and its biggest fib for small businesses.
The pitch: "Get WordPress and your marketing team can update the site themselves! No more waiting on developers. Self-service content management!"
The reality:
While this may not be everyone's experience, it's common. We've seen it countless times. The mental energy to work the system overwhelms the joy of getting updates done. Exciting work is muted by the mechanics of the CMS.
Week 1 after launch: Education and Frustration
- Marketing manager logs in
- 1. Confronted with: Dashboard, Posts, Pages, Media, Comments, Appearance, Plugins, Users, Tools, Settings
- 2. Tries to update homepage. Discovers: Theme has custom page builder with 47 widgets. Spends 30 minutes trying to figure it out.
- Result: Emails IT: "Can you just update this for me?"
Week 4: The Workaround and Roadblocks
- Marketing wants to add a new service page
- Clicks "Add New Page". Template doesn't match other service pages. Can't figure out which template to use
- Result: Emails IT: "Can you create this page?"
Week 12: Who Will Train The New Person?
- New marketing person joins
- Needs training on WordPress. IT spends 2 hours walking through the system
- Reality: New person still emails IT for most updates
Month 6: The Constant WP Updating...
- WordPress sends update notification
- Marketing manager clicks "Update". Site breaks. Panic. Calls IT.
- Result: IT spends 4 hours fixing plugin conflict. Marketing has to redo work.
The pattern: Despite WordPress being "easy for non-technical users," you still end up with:
- One person who "knows how to do it". Everyone else emails that person.
- Regular training for new staff and still technical troubleshooting when things break
- Little actual self-service happening for new user for 3+ months typically
What you paid for: Self-service content management
What you got: A complex system that still requires constant attention from the "website person"
The alternative: If someone's going to be the "website person" anyway, give them a simple system that doesn't break. Text files don't have plugin conflicts. Contact forms don't need security patches. Static sites don't go down when WordPress updates. The whole site doesn't go down when Cloudflare blows up...
Our experience: After our rebuild, content updates take 1 technical minute (writing is harder). Simple logins, no dashboards, no plugins. Marketing manager edits a text file and put it in the right place to have it publish. Done.
Total training time: 10 minutes
Things that can break: Zero
Monthly maintenance: None
WordPress promised self-service. We saved time and money by embracing reality and instead eliminating complexity.
Real Examples: When "Industry Standard" Means Overkill
Scenario 1: Content Scheduling
Our need: Schedule blog posts to publish on specific dates while we're traveling.
AI's recommendation: "Install WordPress with an editorial calendar plugin. You'll need WP Scheduled Posts ($49/year), Configure cron jobs for reliable publishing, Set up backup systems in case something fails, and add monitoring to verify posts go live."
What we did instead: Added a single date field to our content files. Articles automatically hide until their publish date. No plugins, no cron jobs, no monitoring needed.
Cost comparison:
- AI's way: $49/year + developer setup time + ongoing maintenance
- Our way: 15 minutes of development, zero ongoing cost. We put a date in a text file on an article.
The lesson: AI suggested a WordPress plugin because that's the common answer. We built exactly what we needed without the fat.
Scenario 2: Content Approval Workflow
Our need: Marketing manager reviews draft content before it goes live.
WordPress approach (from Article 1):
- Install WordPress with user roles. Set up Editor/Contributor permissions.
- Train marketing on WordPress dashboard
- "Draft" → "Pending Review" → "Published" workflow
What actually happens:
- Marketing manager still writes in Google Docs
- Emails draft: "Can you review this?". You review in Google Docs anyway. You log into WordPress and publish it
- "Self-service workflow" becomes "email with extra steps"
What we did instead: Created a preview mode. Marketing manager clicks a preview link, reviews the article, emails "looks good." We change a date in text to publish.
Cost comparison:
- WordPress way: Complex permission system nobody uses as intended
- Our way: One URL parameter, works with their actual workflow (email + Google Docs)
The lesson: Don't build workflows that fight how people actually work. They draft in Google Docs and communicate via email/Slack/whatever. We built around that reality instead of forcing them into WordPress's model.
The Decision Framework: 5 Questions for Every AI Suggestion
Here's how we evaluate every AI recommendation:
1. What Problem Are We Actually Solving?
Bad question: "What's the best CMS?"
Good question: "We need to update 3 pages per month. What's the simplest way?"
AI will answer the question you ask. If you ask for "the best," you'll get overkill solutions. Ask for "simplest" and you'll get watered-down answers. Learn how to give AI plenty of context and iterate on the solution until you really get it to be efficient and right for you.
The hidden killer: People time. Your time and your IT team's salary is your real cost. Not counting the opportunity cost of not keeping your site up to date.
Example: WordPress for Simple Business Site
3-year visible costs:
- Hosting: $200/month × 36 = $7,200
- Premium plugins: $500/year × 3 = $1,500
- Subtotal: $8,700
3-year hidden costs (people time at $75/hour):
- Initial setup/learning: 16 hours = $1,200
- Monthly security updates: 2 hours × 36 = $5,400
- Training new staff: 3 people × 2 hours = $450
- Plugin conflicts/troubleshooting: 20 hours = $1,500
- Content updates "website person" does: 4 hours/month × 36 = $10,800
- Subtotal: $19,350
Total 3-year cost: $28,050
Alternative we chose: Simple static site
3-year visible costs:
- Hosting: $60/year × 3 = $180
- Subtotal: $180
3-year hidden costs:
- Initial setup: 16 hours = $1,200
- Ongoing maintenance: 2 hours/year × 3 = $450
- Training: 10 minutes per person = $75
- Content updates: Marketing does themselves, 5 min each = minimal
- Subtotal: $1,725
Total 3-year cost: $1,905
Savings: $26,145 over 3 years
The difference isn't the software cost—it's that WordPress requires constant care and feeding. Our simple site doesn't.
Example: Email Marketing
AI's recommendation: "HubSpot is the industry standard for marketing automation."
3-year cost:
- Subscription: $800/month × 36 = $28,800
- Setup/training: $5,000
- Developer time for integrations: $10,000
- Total: $43,800
Alternative we chose: Mailchimp free tier (under 500 subscribers)
3-year cost:
- Subscription: $0
- Setup: 30 minutes
- Integrations: Contact form → Mailchimp (1 hour)
- Total: $0
The difference: We send one newsletter per month to 200 people. We don't need automation workflows, lead scoring, or CRM integration. HubSpot would be 100% wasted cost.
3. Can We Start Simpler and Add Later?
AI typically recommends complete solutions upfront. In reality, you can almost always start simple and add complexity only when needed. We like bolt-ons.
The Principle: Build 20% now, add the other 80% if you ever need it.
Example: Website Analytics
AI's recommendation: "Implement Matomo for privacy-focused analytics. Self-host for complete control. Set up custom event tracking, conversion funnels, and A/B testing infrastructure."
Our approach:
- Week 1: Add Google Analytics (free, 5 minutes)
- Month 1-3: See if we even look at analytics (even GA is complicated!) - most people don't (or not enough)
- Month 4: We're checking monthly traffic—that's it. These numbers don't drive our business, they occasionally motivate us.
- Decision: Google Analytics is sufficient. Never needed anything else.
What we skipped: Self-hosting ($50/month), custom event tracking (20 hours development), A/B testing (complexity we don't need).
If we needed more later: Easy to add. But we didn't, and we saved thousands.
4. Does Our Team Actually Need This?
AI doesn't know your team's capabilities or preferences. It is trained to assume everyone needs powerful tools and serious workflows.
Reality check questions:
- How often will we use this?
- Who on the team needs to understand it?
- What happens when that person is on vacation? Does that matter or can it wait?
- Is this simpler or more complex than what we do now?
Example: Image Optimization
AI's recommendation: "Set up an automated image optimization pipeline. Install sharp or ImageMagick, Create processing scripts for uploads, Generate multiple sizes for responsive images, Convert everything to WebP format."
Our team reality:
- We publish 2-3 images per week
- Our designer exports images from Figma
- She can run them through TinyPNG.com before uploading
Our decision: Designer manually optimizes images and checks the quality trade-off with a human eyeball (adds 30 seconds per image).
Why this works better:
- No automation to break
- Designer maintains quality control
- No server-side processing overhead
- Total time cost: 2 minutes per week
AI's automated solution: Would save us 2 minutes per week. Would cost 8 hours to implement and ongoing maintenance. We'd break even in 4 years.
5. What's the Escape Hatch?
Tech solutions naturally lock you into using them. It's hard to change horses. Always ask: "If this doesn't work out, how hard is it to switch?"
Red flags:
- Proprietary formats
- Data export requires paid upgrades
- Custom integrations throughout your site
- Vendor-specific code everywhere
Green flags:
- Standard formats (markdown, CSV, JSON)
- Easy export tools
- Works with common tools
- Can copy files and move
If we outgrow the basic approach: It's easy to migrate. We own our content in a universal format.
Red Flags: When AI Is Defaulting to Enterprise
Learn to recognize when AI is suggesting solutions designed for problems you don't have:
Red Flag 1: "Industry Standard"
Translation: "This is what Fortune 500 companies use."
Example: "Salesforce is the industry standard for CRM."
For you: Spreadsheet tracks your 50 clients just fine.
Red Flag 2: "Scalability"
Translation: "This handles millions of users."
Example: "Use PostgreSQL for better scalability."
For you: You have 1,000 website visitors per month. Any database would work fine.
Red Flag 3: "Enterprise Features"
Translation: "Features designed for companies with 500+ employees."
Example: "Includes role-based access control, audit logging, and compliance reporting."
For you: You have 3 people who need access. Sharing one login would work. Don't make it hard.
Red Flag 4: "Mature Ecosystem"
Translation: "Target-rich environment for hackers who've had years to find exploits."
Example: "WordPress has a mature ecosystem with 60,000+ plugins and themes."
Reality: WordPress sites face 90,000+ attack attempts per minute. Every plugin is another potential security vulnerability. Updates break things regularly. Your "website person" spends hours per month managing security patches and plugin conflicts.
For you: Do you want to spend 2 hours per month managing security updates and fixing plugin conflicts? Always feeling a step behind? Or do you want a website that just works?
Red Flag 5: "Future-Proof"
Translation: "Way more than you need now, might be useful someday."
Example: "Build with microservices architecture for future flexibility."
For you: You need a website, not a distributed system.
How We Get Better Answers from AI
The quality of AI's recommendations depends entirely on how well you describe your actual situation.
Instead of asking: > "What's the best way to manage content?"
Ask: > "We're a 5-person marketing team. We publish 8 blog posts per month. Currently writing in Google Docs and emailing our developer. Looking for a way to publish directly without technical knowledge. Budget: under $100/month. What's the simplest solution?"
The difference: Context, constraints, and scale.
Better prompts include:
- Team size and technical skills
- Current workflow and pain points
- Actual usage volume (not projected)
- Budget constraints
- Maintenance capacity
Example: Real conversation with AI
First attempt: "How should I handle website analytics?"
AI's answer: Comprehensive analytics platform recommendations, tag managers, conversion tracking, heat maps, user session recording...
Second attempt: "I run a small business website. I want to know: how many people visit, what pages they look at, and where they come from. That's it. I check monthly. What's the simplest free option?"
AI's answer: "Google Analytics will do everything you need. Add one code snippet to your site. Takes 5 minutes."
Same AI. Different answer. The difference was clarity.
Our Philosophy: Start Simple, Add Only What You Need
Here's what we know (not from AI):
1. Default to simpler
- Most features you think you need, you don't
- Most features you do need can be added later
- Starting simple makes everything easier
2. Solve today's problem
- Don't build for imaginary future scale
- Don't prepare for problems you don't have
- Address real issues as they actually occur
3. Optimize for maintenance
- Simple systems require less upkeep
- Fewer components mean fewer things to break
- Your future self will thank you
4. Question "best practices"
- Best practices are often "enterprise practices"
- What works for Amazon doesn't work for you
- Appropriate practices beat best practices
What We Built vs. What AI Recommended
Our website rebuild revealed a stark contrast between what's "standard" and what's appropriate:
Our initial spec (from Article 1):
- Laravel or Statamic CMS
- Tailwind CSS framework
- Database for articles
- User authentication
- Search functionality
- Newsletter integration
- Custom admin panel
If we'd used WordPress (the standard recommendation):
- WordPress with premium hosting
- Security plugins and monitoring
- Theme with page builder (Elementor, Divi, etc.)
- Image optimization plugins
- SEO plugins (Yoast, Rank Math)
- Caching plugins
- Backup solutions
- User roles and permissions
- Comment moderation system
- Social media auto-posting
- Analytics dashboard plugin
- Contact form builder plugin (Contact Form 7, Gravity Forms)
The WordPress reality:
- Initial cost: $5,000-8,000 agency setup (custom theme, professional configuration)
- Or DIY: $1,200 (16 hours learning and configuring yourself)
- Ongoing cost: $200+/month hosting and security
- IT time: 40+ hours/year managing updates and troubleshooting
- Training: 2-3 hours per new staff member
- Security patches: Every few weeks
- Plugin conflicts: Inevitable
- "Self-service" content updates: Still go through one person
- Actual total cost: $28,000+ over 3 years
What we actually built (from Article 1):
- Simple content files (markdown format)
- Vanilla JavaScript, no framework
- No database (file-based)
- No authentication (don't need it)
- No built-in search (Google + category filtering)
- Simple email signup form
- No admin panel (direct file editing)
- Basic text editor (Google Docs → text files)
- Manual image optimization (30 seconds per image in TinyPNG)
- Contact form (simple PHP, works perfectly)
- Basic Google Analytics
- No security patches needed
- Marketing actually can update themselves (really)
Our reality:
- Initial cost: $1,200 (16 hours development, 2 days)
- Ongoing cost: $60/year hosting
- IT time: 2 hours/year
- Training: 10 minutes per person
- Security patches: None needed
- Things that break: Nothing
- Content updates: Actually self-service (5 minutes, no IT needed)
- Actual total cost: $1,900 over 3 years
Savings: $26,000+ over 3 years
The biggest lie in web development: "WordPress makes it easy for non-technical people."
The truth: WordPress makes it complex for everyone, and you still need a "website person"—they're just managing a complex system instead of simple files.
The Real Lesson: AI Answers Your Question
AI isn't wrong—it's just over-eager to answer the question you asked.
You asked: "What's the best CMS?"
AI heard: "Recommend the most popular, feature-rich, widely-discussed content management system."
AI answered: WordPress, with all the enterprise trimmings.
You should have asked: "We publish 2 blog posts per month and update 3 pages occasionally. What's the simplest way to do this without technical knowledge, for under $50/month?"
The problem isn't AI's answers. The problem is asking AI to make business decisions for you.
AI can tell you what's possible. You must decide what's appropriate.
Conclusion: Use AI as a Research Assistant, Not a Decision Maker
AI has made technical research dramatically faster. What used to take hours now takes minutes. But speed isn't the goal—appropriate solutions are.
Our approach:
- Ask AI for options
- Evaluate against our actual needs-iteratively
- Choose the simplest solution that works
- Add complexity only when necessary
AI helped us understand what was possible. Our business judgment helped us choose what was appropriate.
The best solution isn't the most powerful one—it's the one that solves your actual problem without creating new ones. And the biggest "new problem" is usually the hidden cost of people time managing complex systems you don't need.
Next in This Series
In our next article, we'll explore how the economics of web development have fundamentally changed—and why projects that cost $50,000 five years ago can now be done for $5,000.
Coming next: The New Web Economics: Why Everything Got Cheaper
Want help cutting through the noise? We specialize in finding the simplest solution that actually works—not the most impressive one that doesn't.
Let's talk: Contact us
This is Part 2 of our Website Rebuild series:
* When AI Recommends Solutions You Don't Need (You are here)