Clarification on security patches and test coverage in TensorFlow contributions

In the contribution guidelines, it is clearly mentioned that “All new features and bug fixes must include adequate test coverage.” However, I’ve noticed that most security patches seem to lack test cases, with no changes made to the test files in those patches. For example:

Fix `tf.raw_ops.ResourceCountUpTo` null pointer dereference. · tensorflow/tensorflow@58a9c0d · GitHub Validate `MatrixDiagV{2,3}` arguments to prevent breakage. · tensorflow/tensorflow@34e3aa6 · GitHub

Is this observation accurate, or am I missing something?