RE: TAG directions

Should security be added to the list?  Is that architectural?  Should the 
architecture docs address user behaviors such as deleting cookies 
(some apps depend on them and the user wipes them 
using applications that wipe them as a matter of course when 
looking for spyware).   
 
The issues of security such as identity theft are a very 
public issue.  Are there architectural relationships?  IOW, 
in the attempts to introduce state are security holes opened? 
 
len