Er, Supermicro servers being surreptitiously implanted and installed in customer networks are existentially-threatening allegations against their business. I struggle to imagine what “very bad” would be in your view if that doesn’t rise to the bar.
I was reminded of this recently by a fursuit company issuing a C&D over an accusation most people had forgotten about, for a tweet that was almost half a year old at that point.
24 hours later, the tweet from the target of the C&D has over 7000 retweets and the response from the company has almost 1400 quote retweets yelling at them. Many of the angry responses have as many retweets as the company's tweet.
Hopefully your CTO was.