There has been quite a bit of LWN coverage of io_uring security aspects, most recently https://lwn.net/Articles/902466/

The basic gist seems to be that it's just not currently the upstream developer's focus