The sender has no authority to make judgements on such a matter. The rule is much simpler: classified information may be transferred only through approved channels, and you are trained on proper use of those channels. For that reason the very fact that those emails ended up on her server indicates that someone, somewhere, broke the law. Who is that "someone?" Most likely it's the sender, and their name is printed right in those emails. Detective skills of Hercule Poirot's level are not needed here.
You’re telling me I’m wrong, then making exactly my point.