I read that ICE and CBP are using that signal app fork that Hegseth et al are using, and that has already been hacked, so it should be easy enough for them to take it from there, I guess.