It turns out the definition of “attacks” and “malicious activity” might be to blame. And a little enthusiastic over-egging of the panicky pudding.