Cincinnati SharePoint User Group (www.CincinnatiSPUG.org)

An ongoing issue for us has been owner-managed security.
 
Our goal, and I think Microsoft's vision with SharePoint is for content owners/publishers to manage the access and view of their content.

However, we've run into a number of issues.  For example:
This is one more area of SharePoint that novice owners have to learn about, but a critical area since it affects access and collaboration at all levels.  Other things like understanding webparts, or figuring out the best way to organize document libraries have nowhere near the impact.
Content owners fundamentally don't know the value of their content (they overvalue or under values their content) leading to inconsistent security concepts across our portal.
SharePoint has some out-of-the-box 'flaws' in deployment of site security, for example
By default, visibility of the members of some SharePoint groups is only allowed to members of that group rather than everyone.
The Owners group of a SharePoint site is by default an individual, not the Owners' group, leading to all kinds of strangeness when someone that looks like they're a member of an owner's group can't change site security settings.
In our deployment and implementation of SharePoint we've created an internal Owner's group where we talk about and share best practices.  Security is a topic that comes up constantly and that appears to be the most difficult to understand.
 
A knee-jerk reaction is to place the IT group in charge of security again....  It would be interesting to hear how other companies are handling this topic.

It's not Google.  And we've tried the Wildcard search add-on from Ontolica, and I know I'm not real impressed.  Are companies using SharePoint search successfully, and are they actively managing it (have you create scopes, best-bets, do you monitor search logs?)?

Is anyone using SharePoint to create a Business Process Management System?  Or at least using workflow "in production?"