Oops, that's not right...

Keep the concerns to yourself is incorrect.
Explanation :
Reporting inconsistencies between business practices and security advice ensures that potential vulnerabilities can be addressed, enhancing the organization's security posture.