While QStringList contains a lot of specialized algorithms on not only the list itself, but also the QString members, a reasonable user will expect them to be convenience calling the resp. functions for each member. As such, the security implications inherent to QString manipulation are considered firewalled off by QString (which is one of the reasons to mark QString as security-critical: so that higher-level code can assume it's "doing it's job"), and what remains is a QList, which is (or ought soon to be) marked as significant-only. All of the above: ditto QByteArrayList. Task-number: QTBUG-135195 Pick-to: 6.10 6.8 Change-Id: I6c791ba59d1727d413f553d6498804431451de4c Reviewed-by: Ivan Solovev <ivan.solovev@qt.io>