Having a clearly defined federal guideline is always a good thing. For instance, standing up a private server to circumvent FOI requests should carry a mandatory federal prison sentence. If federal technology concerns were clearly mandated, there would be no excuse for circumventing federal systems and physical tech.