This is necessary because people don't appreciate how bad a problem is unless you sensationalize it for them. For example, if I say 'your DKIM records for your

This is necessary because people don't appreciate how bad a problem is unless you sensationalize it for them. For example, if I say 'your DKIM records for your email are setup wrong, so there is a chance someone can send spam using your email address', nobody will pay for an hour call-out to fix it. If I say 'your email Exchange server has been configured incorrectly and there's no authentication on your outbound emails so you can easily be hacked', people are more inclined to fix the problem because they more easily understand the severity.