This specification defines a client-side API to access metadata information related to media resources on the Web. These APIs will provide the methods for getting metadata information which can already be accessed in one or different formats, either as separate document or embedded in media resources. As such, it introduces no additional security issue.
One should nevertheless note that some metadata could be used to access personal information about someone without them agreeing to it. For example, temporal and geographic information about a media resource could indirectly provide information about its creator.