Small security note in README

:beers: