Hmm, did you / they actually take the time to read NIST 500-291 ???
If they have, and the author had, then you'd know that ITAR is not as much a factor here as NIST's "Special Publication" just released. This is quite important as NIST and their other agencies that cooperate have taken decisions and issued rules/guidance on Clouds.