suspiciousness index for cheating

But the question remains, why was a legitimate player labeled as cheating by the cheat protection algorithm, and could there have been other false positives (e.g. thinkabit)?