Booster comments? What? Since when is routine security auditing bad? A lot of people sleep on it, and have insanely obvious (in hindsight) security issues that could have been avoided by a simple audit.