Such false positives could be managed by introducing more selective annotations, e.g., on content::ResourceLoader rather than the general-purpose net::URLRequest, but our goal in this work was to explore as many variations of data flowing to risky code as possible.
we had very little tolerance for false negatives, so we erred on the side of false positives and developed tools to cope with them.