Not sure why you think revealing the location is risking security

I would rather not give anyone any ideas by explaining how it could be exploited, but it is better to be as private as possible about the specifics of your block producing nodes.

However I still think staying in 0.19.2 is not the best no matter what patch is applied under the bonnet because what the people outside of the circle think is also quite important.

The 19.2 version that a lot of witnesses are running it is literally 19.3 just without the change to update the version number.

It is a valid argument with regards to public perception. It is on individual node operators though to make those types of decisions. It is a political/pr decision (not a security one).

How about witnesses with more than 40% biased feed? Would it change your mind?

No. I am strongly against using a bias to increase SBD production, but I do not expect every other witness to see things from my point of view.

If they have a legitimate reason behind choosing something against my views - I may still vote for them based on other criteria.

I try to look at the big picture (most of the time) instead of making decisions solely based on one issue.