This explanation makes the most sense. A team of lawyers/risk analysts saw "hacker conference", superficially dug in and noted previous incidents that coincided with the "hacker conference" in previous years (bomb threat, the shooter) and decided it wasn't worth it
The bomb threat last year is a funny story that I cant share here. It was very much a nothing burger but their security doing what they are paid to do.
