diff --git a/PMB_README.md b/PMB_README.md
index 4dd1521..9529fc4 100644
--- a/PMB_README.md
+++ b/PMB_README.md
@@ -2,6 +2,8 @@
 
 * GPG stores in-container are wildly insecure
 * This creates a volume for /root with these stores to preserve cache
+* Therefore, entire setup is extremely insecure
+* GPG unlock handling is broken upstream as of 2024
 
 ## Setup