Sure, the framework code will be more secure. But you still need to solve your problem and your framework isn't going to do it. So you have to write code. The

Sure, the framework code will be more secure. But you still need to solve your problem and your framework isn't going to do it. So you have to write code. The code you do write is going to be more secure if you know what's going on. If it's on top of a billion line framework, you might accidentally break the security without even realizing it. No legions of framework developers reviewed, audited, tested or fixed your actual code.