Not sure you know it, but I was one of the first to switch from statusnet to gnusocial. So no, I didn't tried !gnusocial after your security warning. And since there's no stable release, I've to stick onto master branch, which is not bug-proof :-/