Drupal, like Wordpress, Joomla, and many others have their place and both strong points and weak points. (and they all can be set up well, and set up badly) I was just playing on that soon after Whitehouse.gov launched a few years ago, so many non-developers jumped to it.
For a basic web sites, they all can be overkill, and also if you are not going to keep up on updating the core systems (and plugins), can leave a site open for hacks (especially true with WP, just because of its popularity)
I did just take a look at the code for 7.x and was glad to see they finally got rid of using eval() within the code. A few years ago I set up Zend Server which would let you see the performance of scripts, all the way down to individual statements. Drupal used to end up at one eval() statement which took up more processing power than anything else in the page call.