@Viper007Bond - It is certainly not the responsibility of WordPress, but it most definitely is to WordPress' advantage to do so. It would circumvent a lot of the initial, ignorant finger-pointing at WordPress - and the attendant hyperventilating in the press about alleged WordPress "security vulnerabilities".