Inquiring about the Security Measures in Discourse

There’s a document that should answer many of your questions.
discourse/docs/SECURITY.md at main · discourse/discourse · GitHub