Hi Mark,
On the side of security, have you guys ever got your EasySocial component security audited by any security firm? Security is a specialized subject and there are often times even experienced programmers and developers might have overlooked something mistakenly (since you are humans too). Thats where getting audited by a reputed security company will help where they can point out the areas that can be exploited in this web application. Have you guys done that to your component? If yes, when and which version was last audited? If no, would you consider doing that since it can also gives a sense of some security to your users.