This, only 100x worse. Wordpress is so much easier to secure because it has less individual components. Joomla is either something you constantly keep up to date on every level, along with strict mod_sec rules, or something you watch get demolished for whatever the latest exploit was in whatever...