I am familiar with the content of Dragon's presentation. I also draw your attention to what he actually said in this discussion:
"XPages has a few flaws in it which allows 'issues' if it's not developed properly. But I just can't get people to listen to these and thereby avoid the pitfalls."
— that's not the same thing as saying XPages contain security flaws. And you could make the same comment about forms, views, agents...
I am familiar with the content of Dragon's presentation. I also draw your attention to what he actually said in this discussion:
"XPages has a few flaws in it which allows 'issues' if it's not developed properly. But I just can't get people to listen to these and thereby avoid the pitfalls."
— that's not the same thing as saying XPages contain security flaws. And you could make the same comment about forms, views, agents...