Good news: national security systems now will require authentication best practices from 15 years ago

From https://www.wsj.com/articles/biden-to-expand-national-security-agency-role-in-government-cybersecurity-11642604412?mod=lead_feature_below_a_pos1 :

The memorandum signed by Mr. Biden mandates baseline cybersecurity practices and standards, such as two-factor authentication and use of encryption, for so-called national security systems, which include the Defense Department and intelligence agencies and the federal contractors that support them.

.. am I missing something, or is this an incredibly low bar for US National Security?

​

authentication best practices cybersecurity national national security practices security systems