The revoke was blocked.
Before making the change, the app checks the current admin setup in Jira to make sure the action won't leave the project without an administrator.
This check happens when you click Revoke, rather than relying only on the last scan. That helps avoid issues if the project configuration changed after the scan was completed.
The same protection applies to direct role assignments, group-based access, and the site's global admin group.