Like it or not, JWZ considers xscreensaver to be frontline system security. If it doesn't LOCK YOUR SCREEN, it's broken. If you don't want to track the security updates, you are (in his mind) harming users. That is why he specifically suggests Gnome's screensaver: it's a as hardened as a luggage lock.
A version, today, over about five months old is going to have at least one security hole: you can crash out of the password prompt (at least in some cases) by hot swapping monitors at a critical time. So: A) Track the current version. B) Backport all the bug fixes. C) Fork to xluggagelock (or your name of choice for the insecure version) D) Stop pretending to include xscreensaver. At least, that's how I think you'll satisfy JWZ.
