Quoting from the draft: "This document updates an IETF process BCP and has no direct Internet security implications." And I fully agree.