Add App Protection to security guide

[kevintayong]

TODO:

• [ ] If this is a significant change, update CHANGELOG.md
• [ ] Use <h2 id="foo"> instead of ## Foo for headers
• [ ] Leave a blank line after each header

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}