Before working at Metal Toad, I saw an email from Acquia. A strange email.
It went something like this:
On October 15th, we will be addressing a security concern at 9:00 am.
Hmm. That's interesting. I don't remember getting an email about security updates like this. As with any CMS, there are constant security updates as new (and sometimes exotic) vulnerabilities are found.