Why is my Configuration Risk Score 0, but there are risks listed in the table

For endpoints with a "Last Defender Scan" time that is old, but not old enough to trigger a score above zero, the risk is still present in the table - but the associated risk is 0.