I've searched the web and mailing list archives for this one, but didn't find it. I'm just curious if GnuCash has ever gone through a code review specifically for security? Perhaps something like what was done for TrueCrypt...?