We run our forks not because of security, but because pretty much nothing seems to work for production use without some source code level mods.