Add a mention of evil maid attacks

[epiccurious]

The user needs to control physical access to the device at all times.

Keep it out of the hands of non-authorized individuals. E.g in a safe or lockbox when not in use.

https://blog.ledger.com/blockstream/