That's not really fair. There have been very few exploits in up-to-date versions of WordPress, and the ones that are found are quickly patched.

The news-making hacks of WordPress are almost always of sites running versions significantly outdated.