I think that it is quite surprising how secure Magento has been in the wild, there was a version of community released with a vulnerability that had to be fixed the next day, otherwise all good so far.