This is a relatively minor issue, but worth fixing. This draft is aiming for standards-track. RFC2804 says that we won't standardise lawful intercept mechanisms, yet the draft specifies in 6.1 that Args.Mob.Session can be used for that. I'd say best is to just drop that example usage to avoid having to worry about this.

Otherwise, if one believes the basic security claim of SRv6 (that traffic can be kept within a "trusted" local n/w) then the security considerations here are correct that this doesn't add anything new.