Drupal Is Not Secure
This is simply not true. Drupal.org has a dedicated security team monitoring all security problems in core and contributed modules. The fact that drupal is opensource makes it when well managed even more secure than closed source systems. Getting drupal secure is all about selecting the right implementation partner that knows how to take care of things.