[Foundation Board] Follow-up on Board Topic - Revisiting security/vulnerability guidelines for projects