Thanks to Karl for the link and background. Writers of the report have responded in their own spaces, <http://www.zenofnptech.org/2009/04/drupal-security-and-other-cms-report-comments.html > <http://www.idealware.org/blog/2009/04/contemplating-open-source-cms-security.html > Interesting stuff!