None of the checks that are done are pass-fail checks, and that is by design. The directive states that it must be a “collective evaluation” of all the information, giving due consideration to that individual's particular circumstances.
The question that you're posing is about the decision-maker in that moment and everything they're looking at. If required, they can always go back to the individual and say, “Listen, these are the things that are causing us some concern. Can you talk to us about them?” That is what the security screening officials are trained to do in order to make a good risk decision within the context of their organization and their own security tolerance.