dm_mongodb

you may be right that i've overgeneralized to the other products based on my experience with mongodb; all i know for sure is mongodb has some nice properties here.

Preferred and typical use of MongoDB is with no javascript in the queries. There really is a huge reduction of risk for this one particular attack.

trying to understand what you just said: do you mean they may have buffer-overrun vulnerabilities, just as they are new projects? a lot of nosql projects are written in erlang and java btw.

a nice side-benefit of nosql databases is this massively underestimated problem (usually, depends on the product) going away

Sharding is use with replication to provide failover. This will be more automated in the upcoming sharding beta.

Key storage in the document objects make it more 'schemaless' which is actually incredibly useful; the document format (BSON) is efficient. In practice that works just fine. Try it out sometime on a test project?

concurrency is much better in the newest versions

this touches on some related aspects: http://blog.mongodb.org/post/307919034/partial-object-update...