The WFO1000 security analyzer flags public and protected properties of interfaces derived from IComponent which are not System.Component.IComponent, which are not used for serialization. This results in false positives, for example in BlazorHybrid scenarios in WinForms.

Example:

public interface IComponent
{
    void NothingTodoWithComponentModelMethod();
}

public interface ICustomInterface : IComponent 
{
    Rectangle Bounds { get; set; }
    Size Size { get; protected set; }
}

Replaces a part of the Bug of #12476.