eZ publish systems can only be a secure as the hosting environment it lives on. It is wise to ensure that PHP, MySQL, Apache, PostgreSQL, IIS are as secure as they can be.