@Eric Feron @chrismcdevi Thank you both. I've read this and a few other community posts, and I'm still not clear on the following question.

Since unmatched discovered items are still CIs, and Vulnerable Items can still be created for those unmatched CIs, is there any harm in working those "unmatched" VIs as-is, and creating remediation tasks for them, etc? I think it is implied in one of the articles that the VIs or tasks could end up being routed to in incorrect team, but that could probably be accounted for. As is implied in the doc, it may not be possible to ever match a CI; and the process may be lengthy to match some even if it is possible. So it seems that working an "unmatched" VI as-is might be necessary to remediate a risk asap. Note that I am not suggesting that CI Lookup Rules couldn't be improved but questioning if VIs can still be processed until they are.