Update to Security Considerations

Added discussion of potential threat nodes, added discussion of the
conflict between "no new vunerabilities" and "crossing non-supporting
agents" without e2e protection. Some reorganization to better integrate
the new text.