We should protect any withdraw function

[ImanSharaf]

Even though we have 8.8, we need to have an item to mention that we need to protect all withdraw functions against any unauthorized withdrawal.

| 8.8 | Verify that the contract does not send funds automatically but it lets users withdraw funds on their own in separate transaction instead. |

[damianrusinek]

Thanks for the proposal. We are continuing development of SCSVS on our for: https://github.com/ComposableSecurity/SCSVS
We will address your issue there.