Review and update security.md

[dune73]

The security.md is very minimal and it also points to the Spiderlabs repo.

This has to be updated and expanded.

[airween]

#3042 fixed the first part (points to the Spiderlabs repo), so it's already updated (also in v2 by #3043). The extension of the file is still to come.