Phil Odence, the Chair for SPDX, has written a very informative article on why you should use SPDX for Security and even goes onto to address some of the common Myths around SPDX. It was published on Linux.com. You can read the article here.
