At this point in time, any part of vs is intrinsically unsafe and users should keep this in mind while testing it.
Security policies can and should be publicly disclosed for now.
No backporting for past versions is expected before v1.x.x is released.