Even the requirement of a security email contact in a readme is a liability put on the hobbyist. It's antithetical to making code available "as is".

Greg KH says it's going to be great... let me ask, can I /dev/null the email Greg?