In summary, the report should address the legality, security risks, and provide alternatives. That way, the user gets the information they need without being led down a risky path.