Security is hard. But it's impossible when you are idiotic. Only an idiot would think tying someone's personal account to their work account (where their work is counter terrorism) is a good idea!