How does your comment relate to my point?

It does nothing to help us decide between the two cases -- they could be selling data to the CIA or sharing cyberdefense strategies, both would require employees with clearance.