A candidate branch that is stronger than confirmed will be worked on, and will be reorged out to the header tree if it shrinks due to an invalid block and therefore becomes weaker than the confirmed chain. So it's possible that a confirmable block never becomes confirmed, as that requires that its candidate chain is stronger than the confirmed chain.