I'm imagining a kind of weaponized innocent straightforwardness: "GitHub support, it appears a hacker compromised our organization, and slipped up by clicking

I'm imagining a kind of weaponized innocent straightforwardness: "GitHub support, it appears a hacker compromised our organization, and slipped up by clicking to request an AI feature. There's not enough auditing on this, so we need to know exactly which user-account did that in order to disable it and stabilize the situation."