I suppose he meant that he can't trust a product of someone who can't event run his website, since the software may be unstable. Security is not involved. For a new product the website should give to the visitors the feel that you are a professional (I'm trying to give a constructive critic here)
You would rather trust a huge corporation instead of a community-developed project?