Also trying to solve this problem in a new minimalist open source CMS that just hit 1.0:

http://www.elefantcms.com/

I'm also tired of fixing Wordpress malware issues for friends and clients that host themselves...