We've had recently a few security reports and questions created as public issues. Our issue template warns against this, but we should provide more guidance to our community.