What ‘sensitive information’ could be disclosed when setting JsonRequestBehavior to AllowGet

in your return use the following:

return this.Json("you result", JsonRequestBehavior.AllowGet);