> unreasonably difficult

All you have to do is read session cookies. Once you have that, you are done.

That doesn't give you the type of data (and tools) that the provider has. I don't see the government building tools on top of user-level access when the provider already has better data (like login records) and tools.