In addition to what you said: Every so often dbus has security bugs. No software is without bugs, but at least the heavy usage of dbus ensures that at least a lot of bugs have been caught.
Alternative would be to make something like dbus yourself. That still will have bugs, could potentially have sscurity issues, etc. Maybe would be smaller than dbus, but then also would not have all the support that dbus has.
In short: No clue what is better (roll your own vs rely on dbus), but disagree with people who suggest dbus is "obviously wrong" (to be clear: do not mean you :)).