Security policy for tensorflow federated?

[redwrasse]

Hello, wondering if it makes sense to attach a security policy (security.md) to this Tensorflow Federated project? Same for Tensorflow Privacy (https://github.com/tensorflow/privacy), as these projects are intended to offer a hardened security model for Tensorflow use cases.