Issue #3094817 by nicxvan, quietone, prudloff: Add a SECURITY.md explaining how to report security vulnerabilities properly
(cherry picked from commit 6603a36d)
Closes #3556258