Update README with YAML security statement