Tag application security risk