Add initial sections on security and privacy considerations

[fsteeg]

Based on https://www.w3.org/TR/security-privacy-questionnaire

See https://etherpad.lobid.org/p/reconciliation-september-2022