Comment # 14 on bug 1157066 from Marcus Meissner

I see we never provided the needinfo for security.

I am personally also torn back and forth between hardening or not, but as
written earlier the addresses are obscured currently (or are known).

So I would be fine currently to leave it as-is, but security might review this
decision later on.