There's no way OWASP don't know the difference between "the [entire] Internet" and "our website". I believe their intentions are to tone down the fear that people may have. It's gaslighting.