Why 2.1 is delayed for so long

[Robert J. Hansen]

> We all know this...

Please forgive me, but I'm not certain that you do.  You keep on using
that word "security" without ever stating secure against *what*.

I'm fairly sure I'm not an idiot.  (At least, today I am.  Other
days...)  And if while reading your messages I can't figure out what you
mean when you say "security," then I'm pretty sure a good number of
other people can't, either.

So, please.  What is it that you're aiming to secure the system against?
What's the precise threat model, and how likely is it that a regular
user will encounter this risk?