Yeah, it’s the screening that’s free. If that turns something up, then it transitions to “care.”
I’ve had the same experience with “wellness” check-ups: if I mention some complaint to the doc during the visit, it suddenly becomes “visit with complaint” and costs me $120.
CPUs have so many cores these days, that seems like a perfectly reasonable option. Declare a process ‘security sensitive,’ give it it’s own core & memory, then wipe it when done.