Update draft-ietf-tls-esni.md

Co-authored-by: Dennis Jackson <[email protected]>

draft-ietf-tls-esni.md

@@ -1204,7 +1204,7 @@ client implementations to honor this action. Another approach may be to
 intercept and decrypt client TLS connections. The feasibility of alternative
 solutions is specific to individual deployments.
 
-In environments where the network operator controls the endpoint devices, but
+In environments where the network operator does not control the endpoint devices, or does controls the endpoint devices, but
 is concerned about the security consequences of compromised devices, e.g., data
 exfiltration, the SNI field is unsuitable for use as a control even in the
 absence of ECH. This is because compromised devices can alter or spoof the