It took me 36 hours with no sleep to clean up the mess when my 6.5.X was hacked. I fixed the security hole in the couple of scripts affected, but I also added some code that sends me an email with the perps IP any time someone accesses any of the affected scripts in their browser. I get about a dozen such attempts per week, no kidding (most are from Netherlands, or China). So for me, security is actually a pretty big deal anyway.