Google Accidentally Pushed Internal November 2018 Security Update to Pixel User

Based on the scant details provided by TFA this sounds like a classic case of fat fingering a username or email.