Merge pull request #5975 from nextcloud/docs/noid/networkConfigExplanation

docs: Add reasoning for the allowance of http as well as user certs

Author: AndyScherzinger

app/src/main/res/xml/network_security_config.xml

@@ -6,9 +6,11 @@
   ~ SPDX-License-Identifier: GPL-3.0-or-later
 -->
 <network-security-config>
+    <!-- Allowing cleartextTrafficPermitted - we don't control the server yet strongly suggesting TLS/SSL -->
     <base-config cleartextTrafficPermitted="true">
         <trust-anchors>
             <certificates src="system"/>
+            <!-- We allow user-certificates so managed device can make use of self-signed/client certificates -->
             <certificates src="user"/>
         </trust-anchors>
     </base-config>