Or they’ve been successful in marketing this as a security requirement. That carries a lot of weight in .gov and anything involving finance, medical data, FERPA, etc. has a pretty solid argument for pushing secure clients since it’s free and easy.