No known security hole in latest version. Be sure to keep updating as new versions come out. The development team does a GREAT job patching problems that occur.
I figured so, but I just wanted to make sure
It is advisable to check the multibit website
https://multibit.org/ and check for updates periodically.
If you know how you should verify the PGP signature to verify that it is a legitimate version published by multibit.
Any security issues would likely be addressed via updates.