Wording: Quoting is not a security feature

Author: ArneTR

content/en/docs/measuring/runner-switches.md

@@ -25,7 +25,7 @@ If you want to measure a single shell command directly on the host without writi
     + e.g.: `--variable '__GMT_VAR_MY_VALUE__=cats are cool'`
     + The name must match `__GMT_VAR_[\w]+__`, so note the two leading and the two trailing underscores
     + Can be used multiple times if more than one variable shall be submitted
-    + Use `'__GMT_VAR_MY_VALUE__|quote'` in the usage scenario to safely pass values with quotes or other shell characters to a shell command. See [Quoting variables for the shell →]({{< relref "/docs/measuring/usage-scenario#quoting-variables-for-the-shell" >}})
+    + Use `'__GMT_VAR_MY_VALUE__|quote'` in the usage scenario to pass values with quotes or other shell characters to a shell command. See [Quoting variables for the shell →]({{< relref "/docs/measuring/usage-scenario#quoting-variables-for-the-shell" >}})
     + Variables named `__GMT_VAR_SECRET_*__` are treated as secrets. Their plaintext is never stored or displayed. If an encryption key is configured they are stored encrypted, otherwise they are stored as `*****GMT-REDACTED*****`. See [Secret variables →]({{< relref "/docs/measuring/usage-scenario#secret-variables" >}}) and [Private repositories and registries →]({{< relref "/docs/cluster/private-repositories-and-registries.md" >}}) for the encryption key setup.
 - `--iterations` Specify how many times each scenario should be executed (Default: 1)
     + With multiple files (see `--filename`), all files are processed sequentially, then the entire sequence is repeated N times

content/en/docs/measuring/usage-scenario.md

@@ -510,7 +510,7 @@ If a variable is used as an argument in a shell command and the value can contai
 
 Write `__GMT_VAR_NAME__|quote` instead of `__GMT_VAR_NAME__`. GMT then escapes every single quote `'` in the value as `'"'"'`. This is the same escape that Python's `shlex.quote` uses. Nothing else in the value is changed.
 
-GMT does **not** add the surrounding quotes. You must put single quotes around it yourself: `'__GMT_VAR_PROMPT__|quote'`. A POSIX shell then gets back exactly the original value as one single argument. No shell injection is possible.
+GMT does **not** add the surrounding quotes. You must put single quotes around it yourself: `'__GMT_VAR_PROMPT__|quote'`. A POSIX shell then gets back exactly the original value as one single argument. `|quote` makes values with quotes usable in shell commands. It is not a security measure.
 
 Example: