What is an EOA?
An externally owned account (EOA) is an Ethereum account controlled by a single private key. Most personal wallets are EOAs. There is no contract code behind it, no second approver, and no delay.
How we detect one
We call eth_getCode on the address. If there is no code, it's an EOA. Contracts we can't recognize are treated the same way until someone labels them, because we can't show they are any safer.
Why curators care
On RWABeat, a critical power or freeze held by an EOA makes the Control rating red. Pause or a compliance change held by an EOA makes it yellow. A 1-of-n multisig counts as a single key, since any one signer can act alone. Operational keys for freezing are common at regulated issuers; the question is what they can do and who watches them.