Security and messaging is tricky to get right. Government uses a lot of COTS stuff because it’s easier to have someone to sue when shit goes south.

That’s not to say that everything involved here isn’t a flagrant violation of every protocol and procedure involved in protecting classified information. It is.