doc: add warning

Author: damienwebdev

README.md

@@ -11,6 +11,10 @@
 
 This module logs unique GraphQl queries for development purposes.
 
+> [!CAUTION]
+> If your frontend development teams are unscrupulous this package will generate a PII issue for you. We append full query body data into the logs. This means that developers who fail to use variables in their queries and instead embed them directly in the query will cause your logs to be pull of various kinds of data that you don't want to log (potentially PII and credit card data). This uses the same interface as New Relic (which means New Relic and any other configured loggers) will ALSO get this data. You should only install this in development environments. You have been warned.
+
+
 ## Getting Started
 
 This module is intended to be installed with [composer](https://getcomposer.org/). From the root of your Magento 2 project:
@@ -29,5 +33,5 @@ composer require graycore/magento2-graphql-logger
 
 This module is disabled by default. It can be enabled through system configuration: Services -> Magento Web API -> GraphQl Logger -> Enable Logger.
 
-Logs can be found in `graycore_graphql_log`.
+Logs can be found in `graycore_graphql_log` in the database.