Second the 'drupal' motion. I've been playing around with it for a few weeks now and I'm more and more impressed with what the drupal people are building.
Scoop seems to be a dead-end, it always was a total pain to maintain and it has not gotten much easier. Also the long awaited but very much overdue scoop upgrade seems to be vapourware, I personally don't think it is going to happen, and if it does it probably won't be in time. And that does not surprise me one bit, I've looked at some of the guts of scoop and I'd be less than happy if it was my job to maintain it.
Drupal is a modular system that allows you to install / configure only those parts that you want in your websites. It has all the basic goodies and literally 100's of modules that you could install on top of the 'core'. They have a dedicated security team and they seem to have a good set of procedures in place.
As for the 'don't fix it if it ain't broke', in the last couple of months scoop has been slowly going from bad to worse, and I think it definitely qualifies as 'broke' at this stage. Lots of diary entries have been lost and the site is down quite frequently.
Last week I spent some time on trying to fix at least the downtime issue and I think we have booked some progress on that, which at least buys us some time before tough decisions will have to be made.
This is not a problem that is going to go away with some band-aids, unfortunately.