This document does not appear to introduce any significant security concerns of its own. I suggest that the Security Considerations section additionally mention the JSON-related security considerations in RFC 4627.