I rejected your premise. I didn't try to solve your problem. Your need for PHP, categories, and whatever else doesn't make any difference. Wordpress will be as, insecure as it will be independent of your need for it not to be.
Again: avoid Wordpress. If you can't, you have my sympathy.