There’s a note on why to keep patching – How To Keep WordPress Secure over at the WordPress dev blog – definately worth a read.

Good sense.