Added todo

src/main/index.js

@@ -58,7 +58,7 @@ app.on('activate', () => {
 })
 
 // Workarounds to allow accessing self-signed HTTPS sites
-// @TODO: Add this as an opt-in from the UI somehow?
+// @TODO: Add this as an opt-in from the UI somehow? It's useful in some cases, but poses security risks for most
 app.on('certificate-error', (event, webContents, url, error, certificate, callback) => {
   // On certificate error we disable default behaviour (stop loading the page)
   // and we then say "it is all fine - true" to the callback