Some people are receiving security mailings even when they're not supposed to. It looks like there's an issue with the db query in _borg_mailers_security_subscribers().