i will prefer phpbb ! because this is a good and nice software and has good big support and fully customizable.
Yes... the boards must be updated with the latest patches, but anyway, not saying that SMF is more secure than phpBB, but probably there are more hackers out there trying to hack phpBB than SMF.