Well it lives in security:netfilter/, so I can understand why someone chose Component:Security. If that is incorrect, the bugzilla groups should be removed. (You have experience with that from the specfile massacre.)