You'd be surprised. At my employer, I'm told before every meeting with internal and external auditors to not offer unrelated information to them.

Basically, give them only what they ask for and exactly what they ask for.

If no one sees something, it doesn't exist, right?