Improve the 'mitigations' check