I think that is possible. You saw the U.K. example of Suella Braverman and using unauthorized software and so on.
You could hardwire into legislation a power by the chief information officer to sign off on the choice of software and devices used for government business. You could put in sanctions for communicating government business on unapproved software and devices. That's something the Americans do. You may recall the Hillary Clinton affair. That could be imported into Canadian law so that, if you are communicating off book on apps like Signal, WhatsApp, and so on, you would know that you were breaking the law.