Norm,
We use DNN extensively as an application framework. We do not modify the core.
We use free and purchased modules when they meet ours needs. No point in writing something that exists already.
Modules that we develop exclusively for Intranet use do not use the DAL.
You can still use the built-in
security features, membership table, roles table and all the other features of DNN without having to do it yourself. Turn on Windows Authentication in the web.config and you have the most solid, out of the box Intranet framework that there is.
mikez