docs(security): rephrase vuln review advises