I was encouraged in the comments to provide this as an answer:
"Does Google publish anything to explain their criteria for reaching an UNCOMMON verdict?"
Not that I was able to find. Their criteria appear to be proprietary and opaque, and are applied on Google servers where we are unable to inspect or control them.
"What can we do at the ...