Review Entur codebases for evidence-backed security weaknesses, privacy-control gaps, misleading security claims, and AI-assisted implementation drift, with scoped STRIDE/LINDDUN output.