Exactly this. A single SYN or TCP connection doesn’t constitute abuse.

Unfortunately many people seem to think otherwise and will spaff abuse reports over an errant SYN packet