They're both equally worthless with security. Get the latest version, patch up anything you find on your own, and then you're secure whatever route you take. No code is "perfect" and never will be. The users have the edit the rest to make it more secure and better.