@westi - Yeah, in discussions with other folks regarding this idea of threat levels, it would do more harm than good if WordPress labeled the threat as minimal and yet, those who didn't upgrade based on the threat level were compromised anyways.

@Gary LaPointe - And that is one of the things I was trying to stress. Providing more information up front to allow responsible users such as yourself to figure out what has to be done.