Are there security standards for each stage of a module on Drupal.org?
Create sandbox project > full project with dev version only > official release
What is the process for the security of contrib modules? Do audits happen?
Historically, I have functionality rather than security on my mind when selecting a contrib module. Partly because I don't know how to easily evaluate security (that is, without studying the entire code). How can I evaluate how secure a contrib module is?