why do you disallow a comment for exploit mitigation exclusions?

Hi,

in our VoIP Client there is a ROP Detection. After searching, this is by Exploit detection engine.

No I can set exclusions for a lot of things and I in all I checked, it is possible to make a comment like here:

but for exploit mitigation, you do not allow to make a comment

Why that?

We must know who did it and why. We can only provide that info with comments.