...I think I agree with Google that the first report was a social engineering attack. Yes, it's an attack that's made easier by Google having a confusing UI, but fundamentally, this feature's job is to summarize and relay the content of your video comments, and it's doing that. It's just that one of those comments claims to be a message from Youtube.

The second report, by contrast, is clearly not a social engineering attack and I have no idea what Google is talking about.