Lift explicitly mentions baked-in security as one of the seven things that sets it apart from most frameworks [1][2], because it's absolutely one of the most important aspects of it and any framework.

The fact that it's not shouted from the rooftops (though it is on the front page) is something I'd rather like to change when I get a chance.

[1] - http://liftweb.net [2] - http://seventhings.liftweb.net