Only a limited ban then
So effectively only on “work” devices. It would be okay for a contractor to have two phones in their pocket, but only the one used for non-work related activities can have TikTok installed. What is not clear, can someone use TikTok whilst on a government site, where “government site” includes the parking lot?