Security is been addressed long time ago. When you create a new project it comes with a insecure plugin, for fast development. You just have to disable it for n

Security is been addressed long time ago. When you create a new project it comes with a insecure plugin, for fast development. You just have to disable it for normal operation. The main pain points when I last tried it were the lack of support for other dbs, having it's own package system which means everything as to be repackaged for meteor and the struggle inside the comunity between switching to react or keeping the old much simpler templating engine. It might be interesting to read what the rethinkdb is doing with the database and with horizon, since to me it looks that they are in a way trying to fix some of meteor down sides.