security considerations drafted by Harald

see also https://www.w3.org/Bugs/Public/show_bug.cgi?id=20806
I found the above paragraph just a bit confusing. Could we expand this a bit. I think I know what you are trying to say and agree, just not clear here.