All they had to do was encrypt the files if they had to be sent on a thumb drive.  They could have been instantly send and received securely as email attachments with an encrypted carrier like Protonmail.  The whole event is contrived.