Security FAQ on the main page?

Just today there was a nice question sent to the disclosures email address about binder, which @Carreau kindly responded to (thanks!!!) It occurred to me that it would be helpful for the community perhaps to have an easy to find list of these common questions. I know we always have the question of "where does the info go" - for example in this case, should it be in binder itself, or in a central location? But while I know duplication runs the risk of staleness, there's also something to be said for these things being very easy to find in expected locations, which points towards some necessary duplication.

My starting suggestion would be to add to [Jupyter Security](https://jupyter.org/security) a FAQ section that starts simply with easy, top-level stuff. If it does grow, we can simply break it down by sub-project, and suggest that in each project's security docs, they simply link back to this page (or the reverse - the FAQ could be links to each project's FAQ section, all identically formatted, I have no strong opinions here).

For reference, the question was, in case we do want to seed this with it -

**Q:** What happens to the data you can upload when using the try-out version of Jupyter Lab online via Binder?

**A:** When using binder we do our best to destroy all the data as soon as your session expires. It might stay in the server memory for a few minutes after you close the page in case this is just a temporary drop in the connection but we do not attempt to keep it and do not send it somewhere else. We also do our best to make sure users of binder cannot infer information about each other while connected.

Though if you are working with sensitive data, we do recommend working with caution, and either host your own binder or a different service.

Keep also in mind that binder can also run images that are not provided by the Jupyter team, and that for those images we cannot make guarantees about their behavior.