I'm not sure I agree with pushing responsibilities on customers. If you miss some security item or if you make my account a super admin on signup I shouldn't have some responsibility to help you fix it.

  What we need our customers to do:
  - Use responsible disclosure in the event any security vulnerabilities occur in our website, software or infrastructure.