Moodle inflates a lot of things that they want to put out there and hides a lot of things they want to keep secret. No different than any other business, I guess. And make no mistake, Moodle is a business. Moodle has some very serious security flaws that many of it’s users don’t clearly understand. For a prime example, see the following.

http://educhalk.org/blog/a-critical-moodle-lms-security-vulnerability-all-versions/