Does your document have an in-line Security Considerations section, ideally one separate from the Privacy Considerations? If not, correct that before proceeding further.
Yes, they have the privacy and security sections from the ARIA/Core-AAM specifications as these are just modular extensions
The DPUB roles and mappings are only extensions of ARIA that add a set of new roles for publishing. They do not introduce new attributes or features to ARIA.
Other comments:
The DPUB roles and mappings are only extensions of ARIA that add a set of new roles for publishing. They do not introduce new attributes or features to ARIA.