This seems like an odd question as I know if not done right there can be security concerns.
We are wanting to show the rich text gadget rather a user is signed in or not. We are making some changes to how users log in and want to show them information regarding what they need to do to update the their accounts to log in.
Nothing that will be is the box will be a security concern for us.