Security for large elgg sites

I'm developing a large site anticipating upwards of 20,000 users.  I'm concerned with security. I'd be interested in discussing how existing large sites handle the issues.