It’s complicated
Spies don’t openly run systems, they infiltrate all systems and operate from within
The CIA isn’t even technically supposed to operate domestically (LOL if you believe that)
A CBDC would leave them more visible to others than they want to be
By way of example: Edward Snowden is CIA. He exposed the NSA probably because there was an interagency squabble where the NSA was tracking everything CIA agents were doing and they didn’t like it lol. And also the NSA probably wasn’t sharing with CIA like they wanted. So some good old fashioned HUMINT went in and exposed the most sophisticated SIGINT operation in human history