updated the security considerations section as it does not take Azure AD joined devices into consideration, which are verified and authenticated by Azure AD