It's definitely a security issue in the sense they've explicitly reserved the right to change and redefine the data they collect from Windows 10 machines with each update while reserving the right to not state what data they're syphoning at any one point.