The question is simple: should test classes be defined with sharing
with sharing | without sharing | inherited sharing to pass the security review?
Technically Salesforce enforces this by saying it in their documentation:
Mark all (non-interface) classes as either with sharing, without sharing, or inherited sharing.
Yet it seems redundant for test classes. If it really needs to be, then why?