Editing other people's answers is a complicated subject, and there are various stances about how to go about it, and whether it's even appropriate at all:
- Good question, old version-dependent answer
- Is it OK to edit answers to show that they are obsolete, out-of-date, and deprecated?
- How do I deal with answers that are good for experienced users but potentially dangerous for newbies?
- Should I accept an edit that adds information to an answer?
I've stated before that I generally prefer not to change the meaning of other people's answers (though I will make the occasional exception every now and then, e.g. there are upvoted comments to the author to make a useful change).
One of those exceptions is with security issues. For example, there are (highly upvoted) answers that describe disabling SSL verification while using Git, which can enable someone to impersonate a trusted endpoint (e.g. GitHub, or any other remote Git host).
I've edited warnings about the security implications into the answers, and made it clear that the warnings were not part of the original author's answer by explicitly stating that they were left by an editor:
Editor's note: disabling SSL verification has security implications. Without verification of the authenticity of SSL/HTTPS connections, a malicious attacker can impersonate a trusted endpoint (such as GitHub or some other remote Git host), and you'll be vulnerable to a Man-in-the-Middle Attack. Be sure you fully understand the security issues before using this as a solution.
So my point is, if you're going to make a drastic change to someone else's answer to highlight security issues, make it clear that you've done so by stating that it was an editor that highlighted the issues, not the original author.
Of course, making a drastic change like this is easier when you have full-edit privileges. If your edits have to go through peer review, I can see such edit attempts as being shot down by reviewers who generally hate drastic edits slipping through because of robo reviewers.
Couldn't you leave a comment instead of editing?
Sometimes, yes, you can leave a big bold comment, especially on answers that don't already have other comments (or have very few):
WARNING: please pay attention to the following security issues! Blah blah blah..
However, sometimes people don't make their warnings in the comments bold, so they don't stand out, even if they end up being highly upvoted:
Further more, sometimes no one notices security issues until much later, when an answer has already accumulated a lot of comments, so any warning comment you leave just ends up being hidden by the other previous (upvoted) comments...so no one generally sees the warning.