Encrypted USB drives feel like progress. From a C3PAO's point of view, they mostly solve the wrong problem. Here's what assessors are actually evaluating — and why the workflow is the issue, not the drive.