I read "closed the security hole", but I never read "reinstalled everything from scratch using clean data sources" - isn't that what he should have been doing?

I still feel icky because of the sourceforge hack and wonder if I should reinstall everything. I probably should :-(