Part of that response seems to imply access to the account was attempted with unsupported software. I imagine if someone used a tool to try to brute force the a

Part of that response seems to imply access to the account was attempted with unsupported software. I imagine if someone used a tool to try to brute force the account it might get flagged as something like that. It seems strange to punish an account for attempted unauthorized access, but maybe it's difficult to differentiate the traffic, especially if it's something like trying a leaked password and moving on rather than making repeated attempts that would look very obvious.