I hear you, but if your experience is with pre version 3 intallations of Wordpress, I will urge you to try again - they started getting a lotof stuff right in the 2.8-2.9 timeframe, and the version 3+ releases are, as I mentioned, really quite good little CMSes.
Have a look at http://www.tokens.com.au/ for example.
On the security reputation front, yeah, Wordpress does have a somewhat deserved bad rep, but the only times I (or any of our customers) have been bitten, it's been ultra-cheap shared hosting that's laelyt blame (along with Wordpresses php-reliance and it's need for guessable-path world writeable directories in the web root...)