diff --git a/static/faq.html b/static/faq.html
index 8654dd30..d9f2d3f4 100644
--- a/static/faq.html
+++ b/static/faq.html
@@ -431,7 +431,8 @@
             ambiguous IP addresses, so encrypted DNS is part of what's required to take away a lot
             of the information leaked to adversaries. However, TLS currently leaks domains via
             SNI, so encrypted DNS is not yet accomplishing much. It's a forward looking feature
-            that will become more useful in the future.</p>
+            that will become more useful in the future. Using it is recommended, but it's not an
+            alternative to using Tor or a VPN.</p>
         </div>
         <footer>
             <a href="/"><img src="https://grapheneos.org/logo.png" width="512" height="512" alt=""/>GrapheneOS</a>