The disclosure comes at a time when lawmakers are already pushing the US DoD to make significant overhauls to its posture on smartphone security.