Validate in strict mode should flag security vulnerabilities

### Problem or motivation

Validation does not include accounting for security issues

### Proposed solution

Validate strict   -> vulnerabilities detected  ->  error
Validate            -> vulnerabilities detected  ->  warning

### Alternatives considered

/

### Additional context

_No response_