I've done sub-sub-contract work for a few government and military orgs where standard procedure would be I would be mailed a thumb drive of what should just be images and word docs to add functionality to a small section of an internal website. Every single time there would be things on there, totally unrelated to the project, that I should definitely not have been given.