Threats that exploit imperfections of the transmitter's light source and encoder, where emitted pulses depart from what the protocol's proof assumes: photon-number statistics, mean photon number and its drift, intensity correlations between pulses, encoding inaccuracy, states distinguishable in degrees of freedom other than the encoding one, and a non-random global phase. These are the threats FPT_EMS.1/Quantum answers and that part 2's EAs 7.2 to 7.7 test.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.