If a package is covered by ESM-Apps but you don't have it enabled then I'd expect the message to be "1 could receive security updates with ESM Apps".
If a package is covered by ESM-Apps but you don't have it enabled then I'd expect the message to be "1 could receive security updates with ESM Apps".