When retrieve actions no longer function after conversion to a nanoflow, odds are that the user in question does not have entity access. This leaves you as the developer with a choice:
The performance bot can't reason about your model and what is or isn't smart security-wise, so it gives you suggestions on what to check. You can always ignore a suggestion if you find that it doesn't suit your needs.