Anyone from Google,
You might want to fix a tiny typo in your security.txt.
RFC9116 uses American spelling, not British spelling, like you did.
Check here:
It's only a small issue, but it might spread when people start using Google's security.txt for inspiration.