We have been on QSoftware for about 2 years. Our rollout experience was similar, with a week of on site training and about 3 months to develop and roll the strategy. We installed first on XE and recently upgraded all of our installations to ERP8.
I have not seen the security admin tools above ERP8, but for now I expect we will keep QSoftware even after upgrade. We also are maintaining a security strategy carried over from XE and which works pretty well for us across 4 concurrent implementations. The biggest reason though is the organizational structure QSoftware provides. We likely won't do much with multiple roles (always subject to change!), and QSoftware allows us to build a visible structure in our security profiles we can easily monitor, replicate, maintain and update across multiple users/roles/installations.
Again, I've not heard much about the native tools in 8.10 or 8.11. I would be interested if anyone can tell me whether or not the native tools have been modified to support higher volume updates, provide some better management of security organization or make it easier, without multiple roles, to enforce standardization around a group of security records in later releases.