Well, of course they must be addressing security changes! It's PHP, remember? ;)