I does not matter if she has a clearance level sufficient to be privy. She must have a need to know AND authorization to possess.
Nobody seems ever to have said anywhere that she shouldn’t have had this information or even possessed it...simply that it wasn’t being held in a way that was “secure.”
There are so many layers here—