For the sake of long term success of the KDE project - it needs a major public financial, secuirity, and bug audit. It would be worth seeing if the KDE project would use donation money to cover outside firms to audit their operations and code.