OK, not only are you completely correct, but the latest TechDirt article shows that the CIA has just blown the identity of all new hires to comply with an executive order.

So long-time staffers might be doing CYA, but the org as a whole is already seriously compromised.