Faulting OWASP as a whole for being something it does not claim to be is hugely unjust. In fact, OWASP ASVS has stated emphatically for years in its introducto

Faulting OWASP as a whole for being something it does not claim to be is hugely unjust. In fact, OWASP ASVS has stated emphatically for years in its introductory pages that it is not an exhaustive reference. As you have rightly said it is a communication tool utilized to communicate security concerns and mitigate risk. Again, I get it. Most people aren’t going to read the first 5 pages of the OWASP ASVS or WSTG let alone read the entire documents.