Security Policies and Practices Thread

This closed issue requested that maintainers enable GitHub's private vulnerability reporting feature so a security issue could be reported privately.