I have users forward me critical security alerts all the time - most are not even close to critical.

I like the scores - just ask them - what's the score.