@Ryan - All it would take from the WordPress developers is a simple comment in the code to show where a change has been made for hardening security. If they used a consistent comment it would then be very easy to run a diff and/or grep that comment.

If we collaborated on doing this and sharing the patches checking for security fixes would not be onerous.

I prefer to see this on the Codex but getting updates on one particular section of the Codex is impossible.