by far, SF is the most secure CMS i've used so far ...