The reasoning behind why it would be a good idea to have an order or part of an order be confidential is that if there is a specific vulnerability in a provider's network, you may not want to advertise that vulnerability as they are fixing it and until that work is completed.
How long it would take to remedy the issue in question and the seriousness of it is very case-specific and would depend on the circumstances.