diff --git a/live/operator-session/clawdie-firstboot-rootpw b/live/operator-session/clawdie-firstboot-rootpw
index e95bd736..ed4379eb 100644
--- a/live/operator-session/clawdie-firstboot-rootpw
+++ b/live/operator-session/clawdie-firstboot-rootpw
@@ -140,7 +140,9 @@ clawdie_firstboot_rootpw_start() {
         printf '  Node secured.\n'
         _rootpw_continue_countdown 3
     else
-        printf '\n\n  [skipped] passwords NOT set — this node remains OPEN.\n'
+        printf '\n\n  [skipped] root/operator passwords NOT set — node is UNSECURED.\n'
+        printf '  Treat this node as untrusted until a password is set. The colibri\n'
+        printf '  agent should not register with mother or run tasks while unsecured.\n'
         printf '  You will be prompted again on the next boot.\n'
         _rootpw_continue_countdown 3
     fi