I think DOD personnel have a reasonable case. The CHICOMs can sell the information...or be hacked themselves.
Give me an example of a violent action that would even be remotely plausible that warrants a carry permit to an employee? Some prior examples of kidnapping or violence to a specific hacked individual would be a plus too.
There are "operational" people who are on the ground that could warrant carry, but those personnel all already carrying.
I don't see a cleared hacked Admin assistant being targeted by any country for kidnap. 99% of all these clearances are limited compartmental knowledge anyway.