Should there be a "security" issue label?

[Oberon00]

There are issues which are not security issues in the sense that they are particularly urgent, but which are related to security. For example #1188 touches on trust boundaries between systems using W3C traceparent headers, #1363 about TLS configuration for exporters.
It might be helpful to tag these issues, e.g. to alert reviewers that they should look a bit closer.