And perhaps the person who digests what the keyword search turns up wasn't paying a great deal of attention, which, I know, is difficult to imagine in the federal government.
Because it means I can create a fake website loaded with social engineering attacks (or even exploits), and trigger a bunch of people with at least semi-sensitive government data to click on them. And they'll be less suspicious because it was sent to them internally.