Everyone watching their own rear ends, keeping secure by decentralization and community support seems the most secure route short of WordPress shoring up their staff and/or IP to beef up their security offerings