I suspect the difference here is that Google alleges thar screenshots of the calendar were taken and distributed outside the company. Viewing a shared calendar that happens to include private events that haven’t been marked private is one thing, but sharing screenshots of the same seems to be something different.