I've added security.txt now. I appreciate the heads-up.