All I can say is when I last tried SMF, within a couple of weeks I got hacked to pieces and have never had that happen with Ubb.
Happens with all of the freeware; I mean comeon, it's free, everyone has it, everyone analyzes it...
Paid software comes off more "secure" because it's generally released on a schedule and patched appropriately; just not here very much anymore (anyone remember the days that we had an update once a month?)