[Foundation Board] Re: Follow-up on Board Topic - Revisiting security/vulnerability guidelines for projects