In reply to Scott Taylor.

Samuel "Otto" Wood, let me start by saying that I appreciate and have respect to you guys (core developers) more than you can ever imagine. This lot are more intelligent and capable than I can even be.

That said, talk is cheap, you can produce all the documents you want, nobody cares. We need to see actions, and not just any action, but meaningful actions. What you did to the plugins directory page just a few days ago was meaningless and made things worse. It's not just me saying this, but the majority of the users. Also, reading from your comments regarding the plugin directory, it seems that activity, any activity good or bad is what you measure success. The measuring stick should be on results, and if things get better or not. I am sure that I'm 100% wrong here, but that is the perception that is presented by the team's actions and comments. How is the new plugin page better than before? We can't even see the new and updated plugins lists, and don't let me started with the meaningless and pixel consuming images... I have to scroll more to see less! Unfortunately I had to shift off topic again to make a point.

If the team wants to totally secure WordPress, then themes, and plugins should not be allowed to get activated that contain dangerous code - period (Scott that was for you).

I am cheering for you guys, honestly, but avoiding or misrepresenting the facts is just wrong. Just making the core as secure as possible, is simply not enough, and it should not be acceptable. Somebody in the dev. team has to do the brave thing here...