Add security concerns to README