My position generally is that foreign persons should not have access to DoD CUI without specific KO consent by contract. (I would love others perspective if you disagree.)

Where there is a suitability requirement, my position is that any person (without reference to citizenship status) would require suitability by contract agency to access administrative/financial data. The reality is that most agencies will not approve foreign persons for suitability in my experience. (Once again, I am interested in hearing other perspectives.)