Update text for safer security level to include WebGL

We should make it explicit that WebGL is click-to-play on medium level (as it had been) already.