[Meta] Address low risk issues found in security Audit

Problem/Motivation

As part of the core inclusion process the Drupal association contracted Cure53 to do a security audit of this module
A number of low to medium risk issues were found that require some server access and were deemed to be ok to make public

Steps to reproduce

Proposed resolution

Remaining tasks

User interface changes

API changes

Data model changes