In reply to KTS915.

The majority of security issues have come from plugin/theme based exploits. The WordPress core, if setup correctly is fairly secure. Having said that, I do agree that work should be focused on more core improvements and less "shiny stuff". The problem is in the inherent fact that in large open sourced based projects you can not please everyone with every release. You do make a valid point.