We actually spend a lot of time thinking and dealing with security concerns, both from a software development perspective and from a devops perspective. You're correct that the data is very valuable, so a large percentage of our architecture and design decisions are dictated by security and privacy concerns.
This actually becomes even more complicated when you think about maintaining blinding, aggregate-only blinding, and some of the other features we need to support.