This is becoming a theme stretching back multiple administrations. The people at the top either don't understand IT acceptable use policies, cybersecurity controls, classification divisions of systems, records retention policies, etc; or they are intentionally ignoring them. And for bonus points, everyone at this level is an espionage target.