Update 11.md

Added ES7 item to-do with security monitors reliably detecting monkeypatching.