This isnt just people being stupid, its a failure by the pentagon to secure their classified comms enforce the restriction on public email account usage by their employees/contractors/whomever. At the very least they should be using some kind of pubkey encryption or better yet only emails over their intranet.