“It looks like it suffers from a lack of manpower and expertise, which is worrying for such a widespread open source utility.”
SUSE found a local root exploit and four more bugs in GNU Screen. Upstream asked for two months and did not fix them. Arch and NetBSD ship it setuid root. A tool on nearly every Unix box has nobody who understands the code.