I think the CIA views easily accessible info as the problem, not the creation of the data. I don't think they are looking for a solution to make things more convenient.
Yeah, but they have to disseminate data and documents both internally, with sibling agencies (FBI, NSA, DoD), and to legislative and executive requests (Congressional panels, inspectors general). So, ideally they would have these best practices for sending secure documents in a reproducible/batch fashion, and reappropriate them to meet their legal obligations under FOIA.
They probably do have such guidelines internally, and totally different and arbitrary ones for FOIA.
Clearly; yet it is encouraging that CREST finally ended up online.