Resembles the theory that HRC’s private server was a conduit for information-selling and was simply a sloppy setup to achieve that end. Both theories are plausible, especially since we know that anything as important as vote machines or the SOS’s email will absolutely be plausibly vulnerable.