If you're willing to satisfy with a static site, static versions of WordPress(like HardyPress) solve the security issue well. They still create a problem with

If you're willing to satisfy with a static site, static versions of WordPress(like HardyPress) solve the security issue well. They still create a problem with dynamic features, but you can implement dynamic features by using third-party services, and get most of the features needed for most small sites that way.