You are putting words in my mouth. It is not a second priority. As I said, it is not only the amount time spent looking at the protocol, but rather the number of people who look at it, as well, that matters.

We can and have looked at it, but more eyes is always better.

If it were a "second priority" we wouldn't be looking to pay people out of our own pockets to help us looks for security holes.

EDIT: I misspoke in my earlier post: it is not that we can't do a "thorough bug check". We have done thorough bug-checks and will continue to do so. However, security is its own job that needs to be attended to constantly and by as many people as possible.