Ah, indeed. Though when working as designed, the ATA Secure Erase *should* reach all storage. Except when it doesn't. Hmm.
In your experience, what are the ATA Secure Erase failure modes? If we (pessimistically) assume that it can fail silently, it is probably often working as intended (unless it throws an error).
So if I had to write an internal standard at $dayjob, the wiping workflow would *always* attempt an ATA Secure Erase first, and then *always* follow with a single overwrite (with zeroes or NULL; the reasons for overlapping / random / multipass are from ancient HDD days).