It doesn’t have to be an intentional threat to be worth responding to. One might reasonably think they’d stumbled on an (admittedly poorly executed) attack.