She shouldn't have set up her own server. And the NSA should have been more sensitive to how important mobile email is to a modern diplomat.
As someone reporting directly to the CEO, I bet it's not so hard... And "but it was really hard" isn't exactly a solid excuse for... anything?