... ones genuinely at risk. A device serving plain HTTP but also offering HTTPS is no longer lumped in with the insecure ones each service shows exactly how many of its devices carry a real finding. - Plaintext admin pages on alternate web ports (the kind routers and IoT hubs love to use) are now flagged when there's no secure alternative