I'm not worried about SSL. I'm worried about a rapidly developed open source project with lots of changes and lots of cooks in the kitchen. All it takes is a buffer overflow and one of a thousand libraries they're using. I don't know that they have a dedicated security team or even anyone really looking at that.

I wouldn't be so worried but it needs to have access to my media which is outside of my DMZ.

And I don't want to put my media into my DMZ.