Sometimes you are stuck on security screening. I have a similar report to yours....'recommended passed' but was stuck in security not started for a long time. Had ordered gcms notes severally kept getting similar update, nothing changed...whatever was outstanding was redacted(hidden) on my gcms note. Recently received schedule A form request in February, filled and submitted. Afterwards got my latest gcms note and found out that my security just started. It was the schedule A form request that activated it....the earlier information that was hidden was the schedule A request.(why they hid that vital information on the gcms notes for months and never requested, I will never know.) Now I am just waiting for my security screening to be completed. Meanwhile, my medical has expired but hoping for an extension. I am a Feb 2021 applicant. Gone past the standard processing time of 34 months, but It's all good, we wait. My advice? Update the schedule A form and send via webform. You have nothing to lose.