The article sort of plasters a variety of common issues, and just applies them to a device now carried in the pocket instead of the travel case. This type of potential threat will continue as long as walk isn't matched by talk (speaking of PEDs in general and commercial wide-area connections then plugged in and sync'd at the office). A failure of imagination leads to agencies playing catch-up implementing Data-At-Rest and "Road Warrior" training for dusty laptops - whew, got that box checked - without realizing the 'warriors' have already moved on to the next 'big' (smaller) thing.
Recall the draconian (and often system-breaking) knee-jerk response to USB devices - spiilage! oh, shit! ban all thumb drives! (Replace spillage with school shooting and thumb drive with gun & you'll get the drift.) What they should've done was just order up a few public hangings.
Higher piles of paperwork and hours devoted to audits to check on the audit and massive online training for the auditor don't fix bad behavior.