OK.  The admonishment should probably point to a generic documentation section (maybe in a new "web security" chapater in the narrative docs) that explains this in some detail, rather than trying to drive-by warn here.