You mean like SELinux? Or SE Android? Or the STIGs?
I am just saying that they should have a pre usb meter that prevents the usb stick from being attached to a device directly such that they can screen it off ...