The security issue noted appears to be https://blog.mozilla.org/security/2011/06/16/webgl-graphics-..., from June 2011 (FF bug was actually fixed May 26th, 2011).

It was a Firefox issue, not a spec issue. AFAIK, Microsoft never explicitly detailed what their security concerns were.