How do you handle client pushback when your pentest finds *too many* criticals?

You've just dumped 40+ critical findings on a client who expected a clean bill of health. They're getting defensive, questioning your methodology, or asking you to downgrade severities. What's your strategy for managing this conversation without compromising report integrity?