Why cloudy?
I'm not going to defend inherent hypocrisy of policy pointed out by previous posters.
But I think I can explain why this is a cloudy mess. Suppose for a moment you're an army civilian or contract employee sitting behind the mil-spec firewall. You are subjected to hundreds of written and unwritten rules concerning config, hardware, software... many different rule sets from warring bureaucracies above you - each eager to prove its the One True Fount of Authority. On the other hand you've got a job to do. On the third hand you can outsource this pain to a fly by night subcontractor - or a dodgy bit of a major contractor - and let them do whatever they want outside your overlord's realm.
Blue or red pill, which will you take?