Some of these programs run in sensitive positions: a lock screen, a greeter running before anyone has logged in, a clipboard daemon that sees everything copied.
If you find a vulnerability, please do not open a public issue. Use GitHub's private vulnerability reporting on the affected repository, or on hyprforge-suite/hyprforge if you are not sure which one it belongs to.