Thanks, I already did
If someone from the MODX dev team reads this, it might be a good idea to include information about deleting the security folder in the upgrade instructions in a very clear manner so nobody misses this, if it can't be done automatically through the upgrade script. It's no fun being hacked, trust me, I know :-/