Back in 2011 I started a thread on possible security issues. There was considerable comment & some may have been resolved by now, but some may still be open. Archive of the thread: https://lists.alioth.debian.org/pipermail/freedombox-discuss/2011-April/001439.html