There is probably a security bug in the comment system. Probably unathorized posts are possible (although not necessarily easy.) Anyway, the security sections of comment.php needs to be redone. Probably this will unwisely have low priority (unless some expoits it, that is.) Anyway, I suspect that it is only a bug in the case of private comment pages, and we don't have any of those.