What remaining sites I have parked on my servers generally fit this description. Or, sites that the owners really should have taken yet, but I’m still hosting 😛
Given these sites don’t change much, between updates I just lock them down with sudo chmod -R u-w /var/www.
They are all normally 550, but I briefly run sudo chmod -R u+w /var/www before plugin updates or new image uploads, etc.