Tornado fits that middle ground sweet spot for me, in a lot of ways. Its lightweight to learn, but includes a surprisingly good number of really helpful stuff for web apps.

One of those things is its wonderfully simple oath2 helpers (the simplest I've seen, really).

You'll still have to bring your own model layer though. And its ecosystem isn't as rich as flask. That is a shame, because its a wonderful little framework.