Your security team sucks. Users should be encouraged to report anything sus, even if it occasionally results in a false positive.