The prerendering spec currently doesn't have sections for security and privacy considerations.
https://wicg.github.io/nav-speculation/prerendering.html

Several explainer documents in this repo describe such considerations, which should be added to the spec.