> Their main complaints are 1) Lack of good clients, driven by a mostly closed ecosystem 2) Lack of good federation which brings down the whole network occasionally.

Those might be security adjacent, but i'm not sure i would call them core security concerns.