To be fair many PHP + MySQL CMSses suffer from similar issues. At least WordPress was hackable enough for us to ship as a mere plugin which I think will be important down the road for user adoption.