security; we don't care about that

pep-0552.txt

@@ -72,7 +72,8 @@ the source file. We will use a SipHash_ with a hardcoded key of the contents of
 the source file. Another a fast hash like MD5 or BLAKE2_ would also work. We
 choose SipHash because Python already has a builtin implementation of it from
 :pep:`456`, although an interface that allows picking the SipHash key must be
-exposed to Python.
+exposed to Python. Security of the hash is not a concern, though we pass over
+red-flag hashes like MD5 to ease auditing of Python in controlled environments.
 
 When Python encounters a hash-based pyc, its behavior depends on the setting of
 the ``check_source`` flag. If the ``check_source`` flag is set, Python will