Ye olde analog hole.

A few draconian DLP things could discourage exfil:

- disallow USB and remote access

- require RTO )':

- disallow personal devices in work areas

- harden buildings to prevent Van Eck and monitor image recovery

- disallow guests in certain areas