Update comment in Compiler.java regarding turning off debuggable.

Change-Id: I281b7ef66e77a7812affa97de8010d61cee5c3af

appinventor/buildserver/src/com/google/appinventor/buildserver/Compiler.java

@@ -269,6 +269,8 @@ public final class Compiler {
       // http://developer.android.com/guide/publishing/preparing.html suggests removing the
       // 'debuggable=true' but I'm not sure that our users would want that while they're still
       // testing their packaged apps.  Maybe we should make that an option, somehow.
+      // TODONE(jis): Turned off debuggable. No one really uses it and it represents a security
+      // risk for App Inventor App end-users.
       out.write("android:debuggable=\"false\" ");
       out.write("android:label=\"" + projectName + "\" ");
       out.write("android:icon=\"@drawable/ya\" ");