The idea that Keycloak solves security issues makes me giggle. It's CVE's should shed some light on what I mean.
- https://www.cvedetails.com/vulnerability-list/vendor_id-25/p...
- https://www.cvedetails.com/vulnerability-list/vendor_id-25/p...
Also the most recent release 22.0.2 only has 3 (known) vulnerabilities. https://www.cvedetails.com/vulnerability-list/vendor_id-25/p...