WordPress compromised again

It is slightly annoying that even when I keep WordPress up to date automatically that it still gets compromised. Is this really the trade off between a great flexible piece of software that creates nice flowing websites? That it is constantly full of zero-day exploitable holes?