I totaly agree with you , But you Have to admit that xoops one Of the Most Secured CMS portal On the Net .

and Most of the Bugs, Sql injection , Exploit..etc Were Found On different Modules Devloped by others .

and you know as much as i know that there will Never be A secure Code .. there always Holes left unpatched .

For Now Xoops + Protector Stands One of Most Powerful Portal and Module . when i have PHPNuke every day i used to Check My site always Picture a Message ' You have Been Hacked " this Nightmare Did not go away yet but with Xoops my worry is less . but i know Never say i'm Protected .. there always will be Hole the kids will Passthru.