Update README.md with security notes

The last commit did not update security notes — correcting that in this
commit