[css-color-4] mention ICC profiles have no executable code w3c#5552

Author: svgeesus

css-color-4/Overview.bs

@@ -3899,6 +3899,12 @@ to create user interfaces that appear to be from the system.
 However, as several system colors are now defined to be "generic",
 this risk is believed to be mitigated.
 
+This specification adds to CSS the on-demand
+downloading of ICC profiles.
+These do not contain executable code,
+and thus do not consitiute an increased security risk.
+
+
 Accessibility Considerations {#a11y-sec}
 ========================================