>If I'm wrong (which is entirely possible), could you or someone point me to a resource that explains this better?

Run code with FxCop.

FxCop orders to add this security attribute since Msg is passed by Ref.

Method can change Msg parameter directly and this is treated as unmanaged code.