The better argument is that as soon as a government agency uses such systems, the data they access belongs to the people and is subject to public review -- immediately. We The People have a superior right as codified by Federal > State > Corporate legal rights. So regardless of contracts which limit publication, all data from private parties the government touches belong with the people.
Let's ignore how they perform CYA, and instead say sure, you can do that, but internal consistency must be maintained, and that data immediately becomes public record and available. It's a great double edged sword, because then that vendor of information becomes a subject of the public, with no privacy for their data which they peddle to sociopaths like themselves.