1) He put work documents in a non-government email address that anyone who understood technology would understand was insecure.

2) At that point, the competence of the provider isn't the problem.