Instead of effectively designing and administrating their systems, "the powers that be" are taking the "rubber hose, lead pipe" approach. Creating in "law", what they are too distracted and incompetent and egotistical and tight-fisted (tech is a "cost center") to create in fact and systems.
They are, in essence, trying to redesign the nature of the Internet by fiat.
Historically, accessible resources are accessible. Public by their very nature. If you don't want them publicly accessible, implement (effective) authentication.
But this is far too much "trouble" for self-important, "do it my way" lawyers and executives.
So, they "define", or redefine -- in a pure fiction of language -- what is "public" and "private".
Aside from all else, these... "errors in the system" should be routed around. Denied use of the system.
Unfortunately, in this regard, tech has ended up in the position of working for them, rather than vise versa.
Personally, I won't work for them, anymore. Every thing I do for them, is against my own interests and, I've come to believe, the common good.