No clue personally, but the author is prolific enough here that I thought it merited posting.
1. it consumes too much systems resources. So its net-negative impact on the system under observation
2. it's misleading and leads to false diagnoses of situations under review
3. she's under an NDA of some kind related to a CVE or some other high class risk which will come out in due course but she felt a burden to stop people being exposed to risk.
4. I can't count and there are 4, 5, 6 other reasons but these 3 are mine.
It might just be that "uninstall" is the simplest one-word advice you can give that will definitely solve the problem.
It has to be 3.
And she knows her stuff, so I'm listening. Luckily we don't use atop.
I'm not saying it isn't 3, but if it is, it seems like there might be more to it than a run-of-the-mill CVE.
Or maybe she doesn't know of a specific vulnerability/backdoor but has some reason to be suspicious there might be.