No, it's not an annoying part of this policy, which states clearly that the SD drive only needs to be encryptable (not encrypted, as yet) if it's non-removable (i.e. the "emulated" partition). It doesn't refer to removable SD cards. Your friend is subject to his employer's policy, probably...