I think it's better to keep it in Product, otherwise the note property will be part of other classes extended from CommonObject like Societe or Projet, who use the newer note_private and note_public properties.
By the way, update_note() can also update note_public and note_private which are properties declared in the derived classes.