Said all that; the most important thing is to choose a solution/technology that suits the main content creators to make it as easy as possible for them to keep the site up & alive, well organised and good looking a distant 2nd and 3rd
Spot on!
The developer is more important than the user? That would defeat the purpose of the site. There are plenty of extremely amateurish sites around, obviously created without a CMS, that drive me crazy. Not to minimize the significance of the security issues, but at least the F16 site looks good - and imo is appealing to people wanting to learn about the class.
One positive with Joomla is that there is an active user/developer community. If there are security problems (and assuming the problem actually lies there and not with mysql or something) at least there is a mechanism for getting these fixed eventually.
Anyhow, to come back to the original point - thanks again Paul for all your work on this.