Have you ever looked at the history of Oracle security flaws, as well as their reluctance to improve it? A public resource for this is David Litchfield.