wiki: record what the security sweep did not cover !286

merged merged by cmc on 2026-09-06 18:49 UTC · krz/gitbay:sweep-149 into main