Can you elaborate? What other uses this list could have than security purposes?
It should not be used for security purposes when security purposes is defined as components that maintain the security at runtime. It is valuable as a testing tool, but only against a completely finished system.