I was lucky enough to see Jakub Suchy give an awesome summary of Drupal security features today at the Drupal Camp in Prague. I would recommend keeping an eye on the DrupalCamp website for the video recording to be posted - essential Drupal viewing!