diff --git a/66.md b/66.md
index 9b467912..9f06ff5f 100644
--- a/66.md
+++ b/66.md
@@ -95,3 +95,9 @@ Example:
   ]
 }
 ```
+
+ ## Risk Mitigation                                                                                                                                                 
+                                                                                                                                                                   
+  - Clients MUST NOT require `30166` events to function. Absence of monitoring data MUST NOT prevent relay connections.
+  - A monitor may publish erroneous `30166` events, either by misconfiguration or malicious intent.
+  - Clients SHOULD NOT trust a single source. Defenses include: web-of-trust filtering, querying multiple monitors, and discarding filter results if they would remove an unreasonable proportion of relays.