It's been awhile since I posted. I'm not a WordPress guru, security expert, developer or anything close to that.
But I've been a WordPress user since 1.3 and for the record, I haven't come across any platform that rivals the design and ease WordPress provides. :)
Anyhow, just curious about these particular things in RC and major release announcements.
1. no mention of security enhancements and/or a paid 3rd party security audit of the core WordPress codebase and bundled plugins/themes
2. no paid security bounties? I'm going to be partial here, but I've been a Menalto Gallery user since 1.4 also and they pay folks to find these security bugs, recently, paid out $1000s (the platform is not related to WordPress but just making a point bounties, paid bounties)
I do understand there are dozens of "security companies specializing in WordPress security" and not to mention, freelancers. It looks like there sure is money to be made there. :)