You’re not only required to provide a large enough hard drive, but it must be “brand new, still in the box and unopened”, presumably for security reasons. This requirement is a bit silly in my opinion, and probably prevents a lot of would-be FOILers from getting this data,
That's a completely sensible stipulation. It's imperfect like all security, but it's a legitimate reason rather than just a barrier.