I think it's less about Management endorsement and more about notification blindness.

If you start adding wholly unrelated messages into the security warnings, people start ignoring them. We've seen the same with medical systems where doctors and nurses ignore the important pop ups because so many are just interruptions.