This is true – but at the same time the security research community doesn't require that every paper do this, only that if your paper has potential for harm tha

This is true – but at the same time the security research community doesn't require that every paper do this, only that if your paper has potential for harm that you discuss how it was managed. It definitely comes up in program committee meetings though (and it tends to provoke some of the most heated discussions).