Moodle and any online open sourced app aside, I'd say 'security' is everyone's 'job' ... ie do the updates/patches/fixes.
The number one factor in breaches today ... guess what ... failure to fix/patch/update.
Would hate to hear you've experienced first hand a worm like Code Red and/or Nimda.
You are, of course, free to do as you think best!
2 cent opinion ...