I've been with a few separate orgs that had this exact thing happening. When you flag it, they come down from on high saying "oh, it's been waived", trusting that no one will actually ask to see the waiver. Two of those orgs ended up paying fines, nothing compared to the profit, but eh, better than nothing.