For one, you're not considering malicious actors not acting independently. It's not easier to get an nth generation citizen than a naturalised one to apply for

For one, you're not considering malicious actors not acting independently. It's not easier to get an nth generation citizen than a naturalised one to apply for a CIA role. There is a way of limiting the severity of such a situation though; just caveat the clearance so the bearer is restricted from accessing any information relating to their country of origin (or any other countries they or close relatives have a potential conflict with). It seems surprising that wasn't done here, regardless of his original intent.