I don’t understand the security pointer. I don’t know if It means that It Is too hard to collectively identify security threats in tensor programs as we are normally doing in other open source software/packages.
If this is the case I suppose that It Is more a question of having sandboxed runtime. E.g. TF.js in the browser it is probably more sandboxed than the regular Tensorflow.