The TPM Webhook is logging tickets with P2 priority. That's probably fair for the failed vulnerability report and a bit high as a default for almost everything else. Can we default to a lower priority for anything we aren't sure should be a high priority?

Tickets all appear on a 1st responder dashboard and on triage dashboards, etc. From there we can raise it if it is serious. Or people can just talk to each other and communicate the proper priority of things they know are serious.