25bfb52e7e
It's not good to put potentially sensitive security issues in the public bug tracker, so advice to use security@matrix.org instead