add closed leak of names of user-created dirs to the Features page

static/features.html

@@ -939,6 +939,9 @@
                         checks.</li>
                         <li>Remove code automatically granting the location permission to system
                         browsers.</li>
+                        <li>Apps that don't have any storage permission aren't allowed to read the
+                        list of all user-created directories (this is allowed on Android). The list of
+                        files is hidden from such apps on both Android and GrapheneOS.</li>
                     </ul>
                 </section>
             </section>