If they could turn basic HR records into a detailed threat assessment, they'd be selling that ML breakthrough to everyone in the world rather than pitching online scare stories.

I'm betting "apply machine learning to internal... records" looks more like listing the employees with disciplinary records and going "revoke network access from these people".