doc: mention transfer data leaks in more places