Security labels have several shortcomings how they have been implemented in Windchill
They are not searchable. This presents a problem when all items of a certain label need to be reviewed.
The workaround to this is to create matching attributes, customize js files to tie the attribute to the SL and vice versa -
Security labels are sometimes dependent on each other. Take CUI as an example. something that has an ITAR or EAR security label MUST also have a CUI//SP-EXPT label. If someone just assigns ITAR, it should be able to automatically select other "dependent" labels
Security labels should be able to take advantage of Cascading attribute features - however because the labels are stored in an individual column in the database, this is probably why they are not. Fixing problem 1 may help fix problem 3