Why does the review team need to test the X or Y part of my offering?

Our approach is to test all parts of the offering to ensure that our mutual customers and their data are not put at risk. This includes external web applications or services that are required or optional, client/mobile applications that are required or optional, and all Apex and Visualforce (packaged or unpackaged) that is included in the offering. If you’re not sure if you should include part of your offering, include it anyway. The review team will not test parts of the offering that we determine are not in scope, but if a required part is not included, your review will be delayed.