Agree. Reluctant to be critical of the topic, given how much those involved have managed to get done, but it is very concerning to me from what I'm able to tell

Agree. Reluctant to be critical of the topic, given how much those involved have managed to get done, but it is very concerning to me from what I'm able to tell how low priorty this issue appears to be. Second issue that to me is pressing given the volume of users is that in my opinion a commitment to execute an audit of the code/crypto/workflow/etc needs to be made; I'd start a campaign to fund this, but such a campaign would be much more likely to succeed if offically acknowledged and more importantly, resources are provide internally to enable it.