According to the blog post, Drupal 10 comes with an improved password hashing. The composer.json file now contains security advisories that helps to speed up the security updates. Also, sensitive data such as session IDs are encrypted with Drupal 10’s support for encrypted cookies.