You have a point - there are probably no defined rules about whether security risk rules apply when POTUS is employing someone to do something illegal or unconstitutional.
If anyone gets to judge, however, it will be SCOTUS, not voters. It's hard to guess, right now, whether that's a plus for security.
Whether or not ignoring such things is a good idea is something voters must judge.