When I have the Password protection on my website hosted on the WPMU DEV hosting, defender keeps reporting I need to fix the security tweaks:
X-Frame-Options Security Header
X-XSS-Protection Security Header
Feature-Policy Security Header
I enforced to fix all the issues but they are still there when I refresh the page.