Security considerations needs an intro and some structure

[marcoscaceres]

It would be great if we had an introduction to Security and Considerations sections, which included the Threats, what's in/out scope, and and what we are trying to mitigate.