Investigate necessity of uncovered note code

In the MR for the decomposition of the vulnerabilities table as part of the Sec Decomposition it was noted that this line in the Note model code is not covered by spec.

This code has not been modified in six years according to it's commit history, so this lack of coverage is long lived and begs the question if it is executed in production or not, and whether or not it should have a specific test for it?