diff --git a/protocols/BQP.md b/protocols/BQP.md
index 6c2e31955bb0fd1799631b379384c819042526b2..a8d6ba8095d517da8182f3396bf761f70335ad0b 100644
--- a/protocols/BQP.md
+++ b/protocols/BQP.md
@@ -12,7 +12,7 @@ Each peer derives a shared secret from its own private key and the received publ
 
 ### 1.2 Adversary Model 
 
-We assume the adversary can read, modify, delete and insert traffic on all transports at will.
+We assume the adversary can read, modify, delete and insert traffic on all transports at will. Anything displayed on a screen (specifically QR codes) is assumed to be seen by the adversary.
 
 ### 1.3 Man-in-the-Middle Attacks