diff --git a/etc/firejail.config b/etc/firejail.config
index 7912b746c..856018101 100644
--- a/etc/firejail.config
+++ b/etc/firejail.config
@@ -2,7 +2,8 @@
 # keyword-argument pairs, one per line. Most features are enabled by default.
 # Use 'yes' or 'no' as configuration values.
 
-# Allow programs to display a tray icon
+# Allow programs to display a tray icon (warning: allows escaping the sandbox;
+# see https://github.com/netblue30/firejail/discussions/4053)
 # allow-tray no
 
 # Enable AppArmor functionality, default enabled.