A co se na původní zprávičku podívat? ;-)
But no matter how secure of a reputation it has, it's only as secure as the packages installed. So, if you have an exploitable PHP installed, if you employ weak scripting, or if you fail to follow through on updates -- you will get hacked.