meta: clarify V8 flags are outside threat model

meta: clarify V8 flags are outside threat model #124