Big news from the CyanogenMod team this evening. They are introducing a CyanogenMod Account service to help track and remotely wipe lost or stolen phones, and to help on the security front they will be moving to a dual-release of stable ROMs.
The second bit is interesting as well. Previously, CM ROMs were signed with "test" keys — generic keys that ship with the Android SDK. In the near future, they will be moving to a dual-release where a User branch is signed with private keys, locking down the system and bringing it in line with the Android security model. For folks who will want to build themes and edit apps, the test key releases will continue as they are now. This should allow users who want a secure setting to have it, and users who want to modify and tinker still can do so.
These changes are coming soon, but won't be included as part of the nightly builds. For more information, visit the official source below.