Just checked with the team in charge, most users are above n U. Devices that trigger risk control rules may show 0.00x U, such as device or IP clustering. There might be a small false positive rate in the risk control rules. Sorry for dampening everyone's mood, we’ll work twice as hard in the future!