Updated todo and DAO comments relating security risks