I'd agree that a workgroup offers less exposure than a domain, in general. That's usually a size thing, however. Not sure a small workgroup is more secure than a small domain.
The one thing that usually can help in a workgroup is that the domain can contain trusts, which can be more of a surface area for attacks.