I run apache with prefork on my personal sites. Still works. No idea if it supports http/2.

I don't know, but Claude is fixing that too! (doubt that makes it safer either...)