Well, the comment was meant to be taken as tongue-in-cheek, but Wordpress has a notoriously poor track record with security.

It's a trade off. There is some software I'll gladly host myself. Wordpress is not one of them.