The power system and markets have become increasingly complex along with an effort to digitalize the energy sector. Accessing flexibility services, in particular, through digital energy platforms, has enabled communication between multiple entities within the energy system and streamlined flexibility market operations. However, digitalizing these vast and complex systems introduces new cybersecurity and privacy concerns, which must be properly addressed during the design of the digital energy platform ecosystems. In this study, the potential and operation of digital flexibility platforms are reviewed, and a generic architecture with/without a combined distributed ledger technology framework is proposed. Finally, concerns about cybersecurity and privacy on digital energy platforms are discussed.