The security team is getting a number of public statements about the perceived quality of Drupal security. Part of this is due to closed nature of security work. Part of this is due to focus on creating security patches, and not enough effort on outbound security education. One complaint is that security is not displayed prominently both on Drupal.org and in the Drupal software.
I'd like to request that we include one of two links to Drupal 6.
One possibility would be here: admin/reports/updates
Note, I am only suggesting a text interface change, to help educate users about Drupal security and hold off a perception about Drupal's security. Let me know where you think the appropriate place to have a link to security resources is, and I'll try to get a patch in.