Yeah, free plugins are both a blessing and a curse, though the majority of the common WordPress plugins (the common ones) are quite secure and are regularly upd

Yeah, free plugins are both a blessing and a curse, though the majority of the common WordPress plugins (the common ones) are quite secure and are regularly updated. Obviously you can't install just any plugin without doing some research. Obviously you have to be a programmer to roll your own blogging platform so that option is not for everyone, but you'd be reinventing a wheel being run on 70 million websites for the stated reason of writing something that is more secure? You'd have to be REALLY good at what you do compared to the 1000s of WP developers contributing to WP, the dedicated security team, and the hivemind of bug-reporting WP installations. Plus, when you do encounter a security vulnerability (not if you do), it will be your sole responsibility to patch the hole. Closed-source is not a security solution - security by obscurity is no security at all. I do not think that rolling your own blog platform is a bad idea as it's a great learning experience, but it is not a good solution if you are concerned about blog security.