diff --git a/internal/ui/model.go b/internal/ui/model.go
index 57e0bd0..70c966f 100644
--- a/internal/ui/model.go
+++ b/internal/ui/model.go
@@ -233,7 +233,7 @@ type Model struct {
 	termStderr io.Writer
 
 	// readOnly is --readonly. Actions that change the cluster or open a
-	// session into it are hidden and refused, and so are dangerous plugins
+	// session into it are hidden and refused, and so are external plugins
 	// and typed shell commands; see domain.ReadOnlyAllows.
 	readOnly bool
 
diff --git a/main.go b/main.go
index 526538c..f570d20 100644
--- a/main.go
+++ b/main.go
@@ -238,7 +238,7 @@ usage:
                     needed) — k10s never shows this unless you ask for it
   k10s --readonly   look, never touch: no edit, scale, restart, cordon,
                     drain or delete, no shell or port-forward, and no
-                    dangerous plugins or typed shell commands. Every
+                    external plugins or typed shell commands. Every
                     request that could change the cluster is refused before
                     it leaves the machine. Works with demo too.
   k10s update       install the newest release over this binary