Deprecated Security Properties

I noticed in Security.php that several properties are deprecated. Is it still ok to use the following in .env?

Code:

security.redirect = true
security.csrfProtection = 'session'

Simpler is always better