The Governance contract isn't adding any security right now and only adds an extra layer of complexity to the protocol. The multisig already can control the votes here so switching the Timelock admin will only increase security by removing the extra contract. In the future, the protocol will move back to fully distributed, on-chain governance.