Also: code that is widely used has its security flaws discovered, and thus will almost always have more vulnerability reports than code few people use.
Of course, it also means that fewer exploits will be developed for the same underlying level of vulnerability.
Said differently: The fact that script kiddies attack the most widely deployed software isn't a good excuse for that software. Quite the opposite; it's one reason not to use it.
--To UNSUBSCRIBE, email to debian-user-request@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org