SBOMs
A software bill of materials lists what is inside a piece of software. It does not say whether any of it is safe.
Its value is answering, quickly, whether you are affected when something is announced, which historically took organisations weeks. That is a real capability. It is not an assessment, and treating the existence of an SBOM as evidence of anything beyond disclosure is a misreading.
Checked against the primary source.