I read that as "expanding protections to reduce (privacy and security) risks ..." but I guess you're reading it as "expanding protections to reduce (privacy) an

I read that as "expanding protections to reduce (privacy and security) risks ..." but I guess you're reading it as "expanding protections to reduce (privacy) and (security risks) ..."