Security vs Features is a trade off in any software.

I answered trick question, because:

- out of the box the current version of WP is thought to be secure
- any version of WP is securable
- any version of WP can be made insecure

In IT we always say security is a ongoing process not a single state or point in time.