[css-color-adjust-1] Add privacy & security section. #4772

Author: fantasai

css-color-adjust-1/Overview.bs

@@ -497,6 +497,17 @@ Performance-based Color Schemes: the 'color-adjust' property {#perf}
 			when distracted in a car.
 	</dl>
 
+Privacy and Security Considerations {#privsec}
+===================================
+
+	Applying user color preferences via [=color schemes=] or [=forced colors mode=]
+	expose the user's color preferences to the page,
+	which can increase fingerprinting surface.
+
+	Additionally, it may be possible for an embedded document
+	to use timing attacks to determine whether its own 'color-scheme'
+	matches that of its embedding <{iframe}> or not.
+
 Acknowledgements {#acknowledgements}
 ================