I haven't really heard anything either. A good deal of its security would have to be with the code you write. I don't think the Control itself could have a buffer overrun, but if you run it as a server, I think if someone just kept opening connections to it they could create DOS conditions.