Reintroduce and update security discussion of incremental upgrades.