fix: note regarding: ORY-04-001 WP2

[jhickmanit]

and informing users of the behavior of unverified email domains.

Checklist

• [ X] I have read the contributing guidelines and signed the CLA.
• I have referenced an issue containing the design document if my change introduces a new feature.
• [X ] I have read the security policy.
• [ X] I confirm that this pull request does not address a security vulnerability.
  If this pull request addresses a security vulnerability,
  I confirm that I got approval (please contact security@ory.sh) from the maintainers to push the changes.
• I have added tests that prove my fix is effective or that my feature works.
• I have added the necessary documentation within the code base (if appropriate).

[CLAassistant]

All committers have signed the CLA.

[vinckr]

Thanks 🐝
I feel like this would be better as normal text, maybe with an appropriate h3/h4 heading.
notes should be used sparingly and for short sections of text only - if we have 2+ notes in a document it's already a red flag to me

also please run make format to satisfy the CI 🙏