The application takes care of security activities regarding the update of the new address. The reasons for this are (l) if the connection needs to be secure, the applications have already shared some kind of security, and (2) if the connection is not important to the extend that it requires a shared security association between both end host, then it might not important enough to be hacked by others.