This exactly. I’ve run into this use case today - for the first time ever, to be fair.
I have a new user I find extremely suspicious. They haven’t crossed the line (yet?) but I’d like to keep an eye on them for a while.
I’d also like to amplify this: