Shawn details the two big security changes in .NET 3.5 SP1 on his blog:
We have discussed both changes internally – and I have mixed feelings about them. I guess the most important thing to be aware of is, that they are not opt-in changes. By installing SP1 – the behavior will change automatically – if you like it or not.