For what it's worth they've been making steady progress on SECURITY.md even though some really big ticket items, like TLS support, remain.