Mention consequences of displaying website provided strings in system UI in security considerations

[mkruisselbrink]

The file picker APIs currently allow specifying custom descriptions for accepted types. This will result in website provided strings being displayed in system UI (the file picker). We should mention this in the security considerations section.