KnockKnock scan doesn't detect some launch at login items

[checktext00]

This is related to this issue with BlockBlock. KnockKnock never detects these launch at login apps in a scan (they do actually launch at login, and KnockKnock has Full Disk Access in my system Privacy preferences):

• Micro Snitch (Little Snitch's version of OverSight)
• Stats (open-source iStat Menus clone)
• SMART Utility (technically its menu bar companion app located inside SMART Utility.app/Contents/Library/LoginItems/SMARTUtilityMenuItem.app)

(BlockBlock sometimes does but most of the time doesn't detect them when they set their launch at login preferences. Additionally in the BlockBlock issue, SMARTReporer Free is sometimes not detected by BlockBlock, but a KnockKnock scan does list it in its "Login Items" list)

macOS Catalina 10.15.7
KnockKnock 2.5.0 (latest)
BlockBlock v2.2.1 (latest)

edit:
I am using a standard (non-admin) user account. All apps except SMARTReporer Free were installed in my user ~/Applications folder instead of the system standard /Applications.
When I tried installing these apps in the standard /Applications folder, KnockKnock did list them in its Login Items list

[objective-see]

Thanks for the bug report.

On newer versions of macOS (13+) KnockKnock uses "Background Managed Task" to enumerate such items:

On older versions of macOS, it's tough, as KnockKnock would have to scan the entire system for any app, and for each then check if they have an embedded login item.

[checktext00]

thanks for the quick reply, my copy of KnockKnock does include that same Background Managed Tasks section but it's empty. Maybe a disclaimer could be included for older OSes.

I also saw that when I have Stats installed in the system /Applications folder it is listed in KnockKnock with Stats.app/Contents/Library/LoginItems/LaunchAtLogin.app launching. The weird thing is that even after I deleted ~/Library/Application Support/com.apple.backgroundtaskmanagementagent/backgrounditems.btm Stats still launched at login (but other apps including BlockBlock no longer launched at login). Does this mean that macOS scans every .app before login to look for a LoginItems folder inside the app bundle?

Also wouldn't this type of invisible to KnockKnock login item defeat the entire point of KnockKnock (and BlockBlock when it doesn't work), at least on systems before macOS 13? Malware could just be any app installed anywhere with a silent login item and it would never be seen except maybe in Activity Monitor