As of #17534, JSpecify annotations have been introduced in spring-security-core.
SecurityContext.getAuthentication returns a @Nullable value, but the AuthenticationTrustResolver counterpart is out of sync.
The AuthenticationTrustResolver interface is missing @Nullable annotations for isAnonymous, isRememberMe and isFullyAuthenticated as they all take nullable Authentication parameters per Javadoc.