That link is a list of incidents while the parent comment is referring to security audits of the code.