I posted elsewhere, but I have to agree with the “I really hate that feature upgrades are tied in with security upgrades.”. Can someone point me to the SECURED 2.3.x version? More importantly, if it does exist, might it be a good idea in the future to show a completed and secured install of the previous version when a new version comes out? Too many people seem to feel compelled to upgrade even if they don’t need the features in the new version, just to be secure. I suspect many of them spend hours and hours tracking down plugins and fixing things on their blogs as a result of upgrades, when they likely would have been very content to stop at (example) 2.3.5 instead of jumping to 2.5.0.
While it is nice that there is a secure version of 2.0.x, I think it would be a good idea to issue the security fixes at each step, so that people can get off the elevator at any floor SAFELY. There are way to many unsecured 2.2 and 2.3.x blogs out there, and we all risk google or yahoo taking action to negatively weigh blogs to avoid security risk sites.