It's part of what's more-or-less the design document for the federal government. So of course it doesn't talk about behavior of non-government entities. Not because that's not important, but because it's off-topic and out of scope.