diff --git a/frontend/src/components/SecurityWarningModal.tsx b/frontend/src/components/SecurityWarningModal.tsx
index 201eb97..27fa4a6 100644
--- a/frontend/src/components/SecurityWarningModal.tsx
+++ b/frontend/src/components/SecurityWarningModal.tsx
@@ -88,12 +88,12 @@ export function SecurityWarningModal({ health }: SecurityWarningModalProps) {
 
         <div className="space-y-3 break-words text-sm leading-6 text-muted-foreground">
           <DialogDescription>
-            Bots are enabled, and app-wide Basic Auth is not configured.
+            Bots are not disabled, and app-wide Basic Auth is not configured.
           </DialogDescription>
           <p>
             Without one of those protections, or another access-control layer in front of
             RemoteTerm, anyone on your local network who can reach this app can run Python code on
-            the computer hosting this instance.
+            the computer hosting this instance via the bot system.
           </p>
           <p className="font-semibold text-foreground">
             This is only safe on protected or isolated networks with appropriate access control. If