If you break ancestry, would you have to start security process from scratch?
I know that if you want to create a package from a different dev hub, you would have to restart the security review process from scratch, and the package version won't be autoapproved, but you will have to wait for a real security review. However, what if you just break the ancestry and create a package version which doesn't have the common ancestor with package version which is published on AppExchange, would you have to restart the security review process again or will it be auto-approved like for the 1GMP and 2GMP which share the common ancestor version id?