maybe which profiles or link trees people are looking at. Any questionable content anyone likes. They might be able to use it to deploy 0 days to specified users they might be interested in. Maybe users who work for the gov, or companies they're interested in getting information about.

Hard to know without having them spell out their specific security concerns.