Cleanup of security reports Backend -> Frontend communication

The following discussion from !6688 (merged) should be addressed:

• @zj started a discussion: (+2 comments)

  I felt this line is a bit surprising, any reason this is not pulled into our internal API?