Right now, we show an option to restore your site for security threats:

This flow doesn't make much sense. Can we audit when we allow rewinds to happen so that they make sense in context? Why would we ever encourage someone to restore their site to a threat? That should just be informational and not actionable.
cc @keoshi on this. Sorry for the double posting.
This should be covered on this list and whether items are “rewindable“ or not, can you check to see if everything checks out? https://docs.google.com/spreadsheets/d/1521T068hmg8_FsPXTYBSZU-shoyPRCiGWDnwZlFQ7Ms/edit#gid=0
It may take a bit more time to get everything implemented though.
Everything seems fine based on that doc :)
Done!