Yup. They often claim you’re “malicious” to cover their incompetent butts. This is why reporting should be:

- end-to-end encrypted with a brand new, limited-time GPG key

- use a disposable email service

- make up an alias

- send from public WiFi at a coffeeshop some distance away that doesn’t have corporate CCTV

- Don’t bother with Tor or a VPN because it advertises “suspicious behavior” across network hops that maybe/are monitored/logged

If you volunteer information about your identity, it can be easily misused to attack you in a myriad of legal, professional, social media and other dirty-tricks ways.