Partners have been voicing that for a long time. Customers expect that it means zero egress but there are many, many, scenarios where egress occurs and Atlassian considers it RoA-compliant because it simply means “runs through Atlassian infra (AWS)” and not “zero egress”.
That badge will cost partners $2-5k per app per year for the pentesting requirement entirely because Atlassian doesn’t acknowledge AI as a viable option which would both improve the overall security of apps marketplace-wide and make that A4A program fairer.