The security section seems reasonable to me, as the document only defines new data types that could be used with YANG data models. The security implication is from the usage of these data types, which is covered by other existing RFCs.