Prior admins required facilities to develop comprehensive security plans with minimal non-disclosure protections. So they intentionally put every person in the country as well as essential infrastructure at risk.
From 2015:
Facility Security Plan: An Interagency Security Committee Guide
5.2.1
Facility Profile
The facility profile should provide a description of the facility including the following:
•Type of facility (e.g., single or multi-story, campus, mixed-use, etc.);
•Population (e.g., single or multi-tenant, F
ederal and/or non-Federal, child care center, visitors, etc.); •Mission and critical functions conducted at the facility (e.g., administration, operations center, classified information, continuity of operations [COOP] site, etc.);
•Utilities (e.g., power, water, gas, communications, etc.); and
•The most current facility diagrams,
construction documents and specifications.
www.dhs.gov/sites/default/files/publications/ISC-Facility-Security-Plan-Guide-2015-508.pdf
You choose: not keeping these plans secret is because the decision makers were/are a. morons or b. black hats.