diff --git a/models.md b/models.md
index b40582a..a891610 100644
--- a/models.md
+++ b/models.md
@@ -30,7 +30,7 @@ but *where* it runs. The provider part tells you the value it stands for:
 > on in an upcoming change — we'll email members before that happens. GreenPT
 > models already use the `greenpt/` prefix.
 
-## The honest caveat
+## Limitations on privacy
 
 Only **Tinfoil** offers architectural privacy. The other providers are chosen
 for their value (renewable energy, public models) but do not run in enclaves —