Update: I think it's about code signature and how the API responds - which also corresponds to root and system binaries not seeing the issue.