I'm no security professional, but I am familiar with the ultra crap security standards of many institutions. It's really just removing a drop from the ocean of potential risks, but doesn't seem that outlandish given the nature of TikTok and where it comes from.