While you are right with the heavily decreased privacy on an SPV client, the sercurity should be completely independent from the type of the wallet (full node / SPV).
All a wallet needs to do in order to be secure, is to keep all private information secured.
This is not depending on whether the wallet gets the information through an SPV server or through other nodes on the network.
The proper process of gathering entropy, generating private keys, storing/encrypting private keys is what makes a wallet secure / not secure. Not the source of information.
you are correct but i was talking about a different aspect of security which concerns receiving blocks and transaction history. when you run a full node, you receive each block and verify them. so for example when you receive a transaction in block X and then time passes and X+3 block is also found, you can be sure it is deep enough to not be double spent. but when you run an SPV node you can not verify blocks, you trust a node is doing it and is not on a wrong fork and there is no block reorg. depending on how the SPV client works these can be more or less serious. https://en.bitcoin.it/wiki/Thin_Client_Security