diff --git a/README.md b/README.md
index a2bc8ab..c65c45c 100644
--- a/README.md
+++ b/README.md
@@ -12,6 +12,8 @@ Here's an example of what you can do when it's connected to Claude.
 
 > To get updates on this and other projects I work on [enter your email here](https://docs.google.com/forms/d/1rTF9wMBTN0vPfzWuQa2BjfGKdKIpTbyeKxhPMcEzgyI/preview)
 
+> *Caution:* as with many MCP servers, the WhatsApp MCP is subject to [the lethal trifecta](https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/). This means that project injection could lead to private data exfiltration.
+
 ## Installation
 
 ### Prerequisites