Going through some old bugs, and just noticed this. In this case the issue was that the bug was still classified as Security_Impact-Head, which implies that there was intent to ship it. Security_Impact-None would have stopped the label reapplication.

Either way, Sheriffbot's comment here isn't helpful. I'll throw a CL together to make the reason for the label application and ways to stop it more obvious.