I've been using Drush on Drupal 7 for a long time, but having started on Drupal 11 I've gotten more used to the Composer approach and see on Drupal.org that many Drupal 7 modules can be installed through composer.

Are there any gotchas installing Drupal 7 and installing/upgrading modules with composer?

Is Composer usage on Drupal 7 mature and comparable or even better than Drush?

I am trying to upgrade a Drupal CMS 1.1.0 installation and Composer says drupal cms is locked to 1.1.0 and causes conflicts with other modules.

Below is a quotation from this link - https://www.drupal.org/project/cms/releases/2.1.0-beta1

Drupal CMS 2.1.0-beta includes a new site template, Haven, with a warm and bright design and features aimed at non-profit websites.

This release should be used for testing only and is not suitable for building websites. There is no update path for Drupal CMS.

It may be a glorious journey to upgrade from the current Drupal CMS 1.1.0 but I don't feel that adventurous.

Right now I just want to make sure I don't fall behind on security updates with all installed modules whether they are part of the Drupal CMS 1.x recipes even if I don't upgrade to 2.x.x.

If Drupal CMS 1.x is locked to particular versions of Drupal Core does that mean it will be eventually insecure and have to be abandoned, unless it offers the ability transfer the content to Drupal 2.x?