Your Scanner Isn't the Control. Your Evidence Is.
Relying on specific security scanner tools over actual evidence of security practices is counterproductive—what matters is demonstrable proof that systems are secure, not which vendor's report you use.