These things aren't locked down with a strict MDM?
"Even though ICE’s MDM provides visibility to all installed applications, ICE did not have a process to periodically review, assess, block, and remove risky applications installed on devices."
Also didn't prevent folks from installing VPN apps and TikTok (redacted, but easy to discern from what isn't).
(i own $day job's acceptable use policy and MDM baseline/operation)
Nice.
As of two years ago when i dumped fedspace, the agency i was tied to had the phones legit mdm locked down and usage was actively monitored. It sucked so hard that phone was effectively unusable, but when the site youre at makes you leave all personal electronics outside the fence, its better than nothing.