Sites do things differently
But also -support
Telling all the CL1 or CL2 on site that "Hey, That thing CI said is a infobreach" would only go poorly, Just act like the info isnt real while you deal with the infobreach compared to telling everyone "Yeah the administrator is real come over here"