diff --git a/Appendix-B:-Extensions.md b/Appendix-B:-Extensions.md
index 3ed7d61..aa4335d 100644
--- a/Appendix-B:-Extensions.md
+++ b/Appendix-B:-Extensions.md
@@ -36,7 +36,7 @@ These are all, where applicable, best configured to `deny-all` and whitelist.
 ### :small_orange_diamond: Recommended Legacy Extensions
 
 * :green_heart: [NoScript 5.1.7](https://addons.mozilla.org/firefox/addon/noscript/versions/?page=1#version-5.1.7) <sup>✔ [Privacy](https://addons.mozilla.org/firefox/addon/noscript/privacy/)</sup>
-   * Yes, there is a FF57+ non-legacy version, but it's pretty much utter crap right now. Use uMatrix instead
+   * Yes, there is a FF57+ non-legacy version, but it's pretty much **utter crap** right now. Use uMatrix in some hardened configuration, but note that this is not a total replacement for NoScript, as NoScript can offer some unique protections; eg: ClearClick, ABE - as of writing these are not yet in the NS10 version)
 * :purple_heart: [HTTPS by default](https://addons.mozilla.org/firefox/addon/https-by-default/) | [GitHub](https://github.com/Rob--W/https-by-default) | [Extension Info](https://github.com/Rob--W/https-by-default/issues/12) & [1370388](https://bugzilla.mozilla.org/show_bug.cgi?id=1370388)
   * changes the behavior for schemeless URLs typed in the location bar
 * :purple_heart: [QuickJava](https://addons.mozilla.org/firefox/addon/quickjava/) | [GitHub](https://github.com/ThatOneGuyDotNet/QuickJava) | [Extension Info](https://github.com/ThatOneGuyDotNet/QuickJava/issues/44)