Answer
Security checkpoints on individual approval-template steps may not be fully supported for every object type — if you don't strictly need the checkpoint at that step, disabling it there is a reasonable workaround; if you do need it, treat gaining full support as a product request rather than a local misconfiguration to keep chasing.