Hello #SecureMyGuestUser

I ran the GUAR report . The custom object "Profile Read Access"  says potential risk (yellow) as the Guest User profile has "Read" access on that object.

As the Guest user needs to create records on the custom object as per the functionality, I assume we can ignore this and keep the object settings as is. Also the USER standard object has potential risk(red) for Manual Sharing. 

The profile permission information has potential risk(red) for some of the permission names. But I do not have any permission sets of those names in my org. In addition it shows potential risk with all of our AuraEnabled Apex Profile Permission. Please help me understand how to resolve the potential risks and also help me understand where are the permission names being displayed from.