Of course - I get it. Its in the implementation that frustrates me. There are other ways to achieve the same outcome at lower cost and better user experience. I worked in near SCIF level security often at GE and we had phenomenal tools with really great security on a MacBook Air and the experience was the same whether I was in Cincinnati or Zurich. Two factor authentication, secure networking, always encrypted messaging, always on secure VPN that “just worked”, catalogs of secure pre-authorized apps both traditional and web based SaaS all tied to our universal auth stack. It was really well done.
Even though I have a clearance, nothing I do on my job now is beyond FOUO. I am thankful for OWA that I can use on my personal devices with CAC - same for SharePoint. So I can do my job on my personal Chromebook or my home gaming rig once I plug in the CAC reader.
My issue iPad Pro 11” is nice - but again the Blackberry technology to enable email access is its own secured walled off container - its nice having access to email via an LTE iPad since no phone based email. Of course everyone in my office/team/command texts each other on day to day stuff. ForeFlight MFB on the iPad Pro is awesome.