suggestions

Author: ozgunozerk

ecosystem/sep-0057.md

@@ -731,9 +731,8 @@ implementations MUST:
 Without both checks, an attacker could call a state-update hook directly with a
 `token` they do not control and corrupt that token's per-module state (e.g.,
 transfer counters, holding-period trackers). Read-only hooks (`can_transfer`,
-`can_create`) cannot corrupt state, but implementations SHOULD apply the same
-checks for consistency and to avoid leaking module-internal decisions to
-untrusted callers.
+`can_create`) cannot corrupt state, but implementations may apply the same
+checks for consistency.
 
 #### Hook-Based Architecture