I'd understand contracting a commercial provider to run the government infra, with extensive contractual obligations surrounding exactly how data is to be handled. What's wild to me is turning government bureaucrats loose to send and receive likely very sensitive information using the third party provider of their choice.