The question arose on a recent discussion about how package protection could possibly be circumvented. I think there might be other security problems that e.g. concern the CDF plugin or network features. If anyone finds such a problem, would we like this to be published here?
In general, I think openness concerning security problems is a very good and a proven approach. It is a different story whether it is good for the site if such issues are made public here. We could e.g. loose the benevolence of WRI personnel who have an important impact on the quality of the site. I would especially encourage those WRI internals to give their opinion.