Everybody and their grandma uses WordPress for site management. From blogs to news sites, it's the fastest growing security hole on the internet. The security hole isn't necessarily in WordPress itself but lazy system administrators. Running a popular application, such as WordPress, increases your likelihood of becoming an end target of exploits.

I write my PHP code by hand. I code from scratch on a server.
My only tools are VIM and PHPMyAdmin.
If an exploit is found in any of my sites the fault is on me for not having written something more secure.

When you run an application with unnecessary features/functions you A) add overhead to system load and B) have another target for nefarious individuals.

These statements are likely to bring scoff from the average admin but are my opinion.