diff --git a/README.md b/README.md
index 5df97d8..1ed4e35 100644
--- a/README.md
+++ b/README.md
@@ -19,7 +19,7 @@ You can specify a secret value when subscribing to receive webhook events. Keep
 
 Don't just enter your "default password" as the secret, use some random value, unrelated text, or best of all: [a hashed value](https://emn178.github.io/online-tools/sha256.html).
 
-> If anyone guesses your secret, they can also subscribe to your webhook events!
+> If anyone learns or guesses your secret, they can send fake webhook events!
 
 ## Usage
 
@@ -30,4 +30,4 @@ Command | Description
 `/dbg-add <org> <name> [secret] [previews]` | Subscribe the current channel to the repo webhook events. Optionally takes a secret. Optionally enable link previews.
 `/dbg-remove <org> <name>` | Unsubscribe the current channel from the repo webhook events.
 
-> Previews will not display if your repo is set to private.
\ No newline at end of file
+> Previews will not display if your repo is set to private.