editorial: split out security and privacy sections

Fixes #2098

index.html

@@ -13741,8 +13741,11 @@ <h2>Example IDL Attribute Usage</h2>
 
 </section>
 <section class="informative">
-	<h2>Privacy and Security Considerations</h2>
+	<h2>Security Considerations</h2>
 	<p>This specification introduces no new security considerations.</p>
+</section>
+<section>
+	<h2>Privacy Considerations</h2>
 	<p>In accordance with <a data-cite="design-principles#do-not-expose-use-of-assistive-tech">Web Platform Design Principles</a>, this specification provides no programmatic interface to determine if information is being used by Assistive Technologies. However, this specification does allow an author to present different information to users of Assistive Technologies from the information available to users who do not use Assistive Technologies. This is possible using many features of the ARIA specification, just as this is possible using many other parts of the web technology stack. This content disparity could be abused to perform <a data-cite="fingerprinting-guidance#active-0">active fingerprinting</a> of users of Assistive Technologies.</p>
 </section>
 <section class="informative appendix" id="typemapping">