tighten the check for abbreviated types

[dawedawe]

see false positive https://github.com/G-Research/fsharp-analyzers/security/code-scanning/5