If the system is too sensitive, it may classify legitimate data as a threat and, thus, legitimate users' activity is prevented. This effectively creates a situation in which the security systems actually creates a denial of service. The impact of this could be that users cannot do what they need to, but they might also be tempted to turn off systems that are designed to protect them.