I think it's because of a number of reasons: - We're very open about vulnerabilities and fix them fast - We have a large install base, in particular >100k Com

I think it's because of a number of reasons: - We're very open about vulnerabilities and fix them fast - We have a large install base, in particular >100k Community Edition installations - Our source code is open and not obfuscated. It's easier to mess around in it for anyone interested, even when it's running. - We regularly have security researchers perform audits - Our rate of change (as mentioned by others) is very high