Refer to privacy / security concern of context deref in 3.1?

[azaroth42]

In JSON-LD documents, contexts may also be specified inline. This has the advantage that documents can be processed even in the absence of a connection to the Web. Ultimately, this is a modeling decision and different use cases may require different handling.

I think this should call out the privacy and security concerns raised by @danbri et al. It is a modeling decision, but it's not just a modeling decision.