I don't think there is any need to extend the set of packages that _should_
get hardening. The current guidelines are sufficient. What is not happening is
the packages that have apps that fit the need to be hardened are not getting
the proper hardening. I have opened dozens of bugs on the "core" packages that
matter, but even those bz are still not complete.