security scans for REST tessteps

Hello,
I notice that soap teststeps have all the 9 security scans enabled.
However, REST teststeps are missing
- malformed XML
- malicious attachment
- xml bomb

I can definitely pass an attachment via REST steps so not sure why these are missing ?

Ali