"Most devices accessing the Internal Revenue Service’s internal network using wireless connections and virtual private networks weren’t authenticated, according to an audit. "

https://www.nextgov.com/cybersecurity/2020/08/irs-granted-tens-thousands-devices-network-access-without-proper-authentication/167784/