This course is a static website: no accounts, server code, database, cookies or analytics. What it does, and how anyone can check it, is in docs/security-and-privacy-checks.md.
Please report security problems privately, not in a public issue: on GitHub, open the Security tab of this repository and choose Report a vulnerability. Say what you found, how to reproduce it, and which page or file it affects.
Problems with the course's facts or sources aren't security issues: use the "Review a claim or source" form instead (linked from the site's Sources page).