> It's like asking for a car that can be constructed by a non-mechanic.
I think that's a good analogy actually, but that's the market. Honestly, I think to try and move into the market that WP has so tidily sewn up would be a waste of time and energy so Drupal has aimed for the higher end of the market - large institutions and companies with content mgmt needs. Also, in my (admittedly biased) perspective, Drupal provides vastly more interesting work opportunities than Wordpress ever could. That's why I chose to invest my time in learning it all those years ago.
> if a non-programmer can build a project on a self hosted platform then you're essentially asking for trouble with respect to security and future maintenance
Granted, but programmers are at least as likely to spawn security holes by being given a more powerful weapon. Relatively simple things like XSS and SQLi can be taken care of for a user who's not touching the code while they build their project. The strong params feature in Rails was a result of a gaping security hole in what I would consider to be the bellwether of good framework design. Mistakes are made.
So you still haven't named a better alternative ;)
In my opinion, I sort of agree - Drupal is the worst CMS, except for all the rest of them.