For something fairly modern, you might want to have a look at web2py. It goes to quite great lengths to balance sane-out-of-the-box and developer productivity:

http://www.web2py.com/

Scala Lift

Nothing is secure by default, even Django and Rails. You can always shoot yourself in the foot, if you don't know the basics about security.

This is why the solution isn't relying on your framework, but on your competence.