Given that Servo does not yet have customers or products, we are comfortable accepting the security related issues as GitHub security reports for now.