i would bet a years salaray that you are correct. copilot or some automated process. and then the message is automated with an automated appeal-denial flow.
conspiracy theories are fun and all, but 99.99% of the time it is just incompetence, miscommunication, etc.
Some guy somewhere deciding to delegate threat assessment to Copilot or some other automated tool.