@tara @stefano as someone rightly pointed out, these are just “compliance audits” branded “wrong”, with no actual security concerns in sight.