[digi_owl]

That is the eternal problem of automated security stuff, the action may be legitimate or not based on context. And code is notoriously blind to context.