You've now made two wrong assumptions, well done. Your claim that OS software is inherently more secure than closed source is not backed up by any evidence (your rhetoric does not count).
I go custom. Im runnign a system called CMS Master Pro developed by ApogeeInvent. These guys build your CMS system custom so you're not working with something 'out of the box' like joomla. www.apogeeinvent.com