How does one do a report on an important commerce-related web site without mentioning serious known security problems which are so bad that respected IT experts warn that it shouldn't be used? Ask Kate Pickert at Time's Swampland blog and Kelli Kennedy at the Associated Press, because that's exactly what they did.
Pickert and Kennedy reviewed the new and not much improved HealthCare.gov on December 2 and 3, respectively. No variation of the word "security" is in either writeup. Both reports ignore the fact that IT experts are absolutely appalled at the site's lack of security.