Security issues are created in custom code when developers cut corners during development or don't make proper use of the APIs, among other reasons.
[Update 09/09/2013] I mentioned below that we'd make our scripts available for setting up BPF.
Acquia Dev Cloud is the Drupal cloud hosting platform for developers, and today I'm really psyched to announce availability of a frequently requested developer feature: Acquia Cloud Hooks. Of course, since Dev Cloud and Managed Cloud run on the same technology, Cloud Hooks are fully supported on Managed Cloud as well.
If you'd rather try Cloud Hooks instead of reading about them, you can sign up right now and use coupon code BJB111209 to get the first 30 days free.