It seems that for the moment, when they are not overridden in config file, all rules are with error severity by default.
Some rules should just be warning, like missing flow description, because they are not as impacting than HardcodedId for example
It would be nice to have a default severity for each rule that is corresponding to its negative impact on the Salesforce org