Split privacy/security into separate sections

Author: khushalsagar

css-view-transitions-1/Overview.bs

@@ -1133,11 +1133,12 @@ The {{ViewTransition/domUpdated}} [=getter steps=] are to return [=this's=] [=Vi
 
 </div>
 
-<h2 id="priv-sec">
-Privacy and Security Considerations</h2>
+<h2 id="priv" class="no-num">
+Privacy Considerations</h2>
 
-The images generated using [=capture the image=] algorithm could contain cross-origin data if the Document is embedding cross-origin resources. The
-implementations must ensure this data can not be accessed by the Document. This should be feasible since access to this data should already be prevented
-in the default rendering of the Document.
+This specification introduces no new privacy considerations.
 
-This feature introduces no privacy considerations.
+<h3 id="sec" class="no-num">
+Security Considerations</h2>
+
+The images generated using [=capture the image=] algorithm could contain cross-origin data (if the Document is embedding cross-origin resources) or sensitive information like visited links. The implementations must ensure this data can not be accessed by the Document. This should be feasible since access to this data should already be prevented in the default rendering of the Document.