What do you recommend instead?

Build a custom CMS for your website, on the basis that even though you probably won't do a better job than wordpress in terms of security you will be obscure enough that nobody will bother you?

I've actually done this in the past with no (known) compromises on something that I'm sure I could pay a smart teenager who watched a few defcon talks to rip apart in an few hours.

Or is there some platform you would recommend that is inherently more secure by design? Like an OpenBSD of the CMS world.