Extremely important. The CMS should have a strong track record of security and actively release updates to address vulnerabilities.