I see this, but it seems that there is no criteria to mitigate the risk. I assume there should be a list of threats that I could address.
Your are right and there should be a list of risks. I don't see this problem in my two tenants though. Can you use the feedback button in Secure Score to tell us about this issue so we can get your tenant info and investigate?
They just appeared today.