Gmailからの疑わしいリンク

All else being equal I would hazard a guess this is an overreaching warning implemented by gmail.

Are these users using gmail.com addresses or gsuite? This information may apply: