While I'm sure the SL open source client has more eyes looking at it than the AO closed source one, this is still worth keeping an eye on: http://securityevaluators.com//content/anarchyonline.jsp