It's obviously more oriented towards testing and stuff (as something compatible with memcached, but lighter) more than actual production use. Security holes are a bit less urgent in that case.