I'm just curious if you believe there are inherent risks in Wordpress, or if you meant specifically Wordpress in the wrong hands and with the wrong plugins/extensions etc.

Well, in the context of submission link -- serving straight up static HTML content, you have essentially zero risk of security vulnerabilities. I meant to contrast this in a general sense with Wordpress, so I moreso did mean to imply Wordpress is insecure for both its inherent risks (fewer or greater than Drupal) and risks that come with plugins (which a significant amount of Wordpress users do end up getting).