Add a Privacy and Security Considerations section

Author: Ms2ger

index.bs

@@ -13495,6 +13495,20 @@ agents in referencing specifications be linked to the
 </blockquote>
 
 
+<h2 id="priv-sec">Privacy and Security Considerations</h2>
+
+This specification defines a conversion layer between JavaScript and IDL values. An incorrect
+implementation of this layer can lead to security issues.
+
+This specification also provides the ability to use JavaScript values directly, through the
+{{any}} and {{object}} IDL types. These values need to be handled carefully to avoid security
+issues. In particular, user script can run in response to nearly any manipulation of these values,
+and invalidate the expectations of specifications or implementations using them.
+
+This specification makes it possible to interact with {{SharedArrayBuffer}} objects, which can be
+used to build timing attacks. Specifications that use these objects need to consider such attacks.
+
+
 <h2 id="acknowledgements">Acknowledgements</h2>
 
 <i>This section is informative.</i>