I guess technically he never said it wasn't for security. Apparently the 5m was an unconditional gift for campaigning for brexit, and how he had spent the money was “not the public’s business”.
https://www.bbc.co.uk/news/articles/c072prlxlddo
https://www.channel4.com/news/factcheck/factcheck-the-latest...