Anti-circumvention law, accessibility, fraud prevention, fair use

This is interesting, but will be tricky to phrase correctly, as again it is more of a legal matter and less of a technical one. We could try to get the AB instead of the TAG to take this on, asking for some kind of commitment from its members (similar to a patent commitment) that they will not prosecute people who search for security vulnerabilities. But coming up with a legal framework for drafting that kind of protection is quite tricky and will require a lot of work from the W3C lawyers, I imagine.