It's a little misleading to suggest that the "the DoD requirements are higher than those required for the FIPS 140-2" because you're mixing apples and oranges (err... pears and pomegranates, to avoid names already used in the mobile biz).
In reality, FIPS 140-2 certification is a necessary (but not sufficient) _element_ of the DoD certification requirements; there is no way a company could "bypass" getting the FIPS 140 certification and just get the DoD approval, which is what the "requirements are higher" implies.
[ Maybe I'm just picking nits -- no, really -- but if the article had used "broader" in place of "higher", I wouldn't have commented... ]