Are custom-coded sites safer than WordPress?

Basically, yes, custom-coded sites are more secure, since the codebase is different, thus making any standard WordPress installation less prone to most common attacks on WordPress sites.