It's not harmless. Google is very concerned about internal security, and putting irrelevant messages in security notifications makes them more likely to be ignored in the future. Your ASCII dinosaur hypothetical is a good way to think about it, and I wouldn't be surprised or outraged if that also resulted in the offender being fired.