As is the person that actually stole them.<p>And yes, I also think that the weight of <i>criminal</i> penalties should generally place more emphasis on deterring people from trying to steal stuff rather than deterring people from working in infosec or security cleared professions. Not that I don&#x27;t think there are potentially people who should no longer be working for the CIA as a result of this.