I think Wordpress is fine if you keep it maintained. I've just seen a ton of sites end up with malware, gaping security holes, etc. because the site owner didn't vet the plugins they were installing.