Curious that they needed to fork their messengers and servers rather than apply a custom policy layer to instruct Matrix to disable federation and restrict registration/room creation. I can see why the fork was necessary, but perhaps the folks over at Matrix might use this as inspiration for management features that some institutions clearly require.