Good point. At a minimum it should clearly state that while the tool didn't "find" such a feature it should not be taken as a security reliable result. See https://github.com/microsoft/ApplicationInspector/wiki/6.-Un...