Or alternately, every system that handles private information (which, for a government, is basically all of them) will be considered to be a security risk to op

Or alternately, every system that handles private information (which, for a government, is basically all of them) will be considered to be a security risk to open-source even though the dataset will still be private. "Security through obscurity" will mean that nothing gets opened.