From the administration that brought us "We are currently clean on OPSEC", I can't claim surprise. Disappointment, but not surprise. Nor, however, can I take the statements of malicious actors at face value. They hacked a personal email address, but that does not mean "the FBI’s security was nothing more than a joke".
Lest us not forget bObama@yahoo.com or the IT guy who worked for the Clinton foundation who posted about bleachbit on recdit