TL;DR. Research security screening checks author affiliations against lists of organizations of concern, using bibliometric data. Affiliation matching is imperfect, though, especially for companies and small institutes with short names or no ROR record, so a researcher can end up linked to an organization they have no connection to.