Per https://www.w3.org/TR/security-privacy-questionnaire/#considerations we should add a Security and privacy considerations section to the spec.