Although curiously the most tightly constrained place I've worked was a swiss bank (horrendous) even more than a UK government agency, my personal experience of

Although curiously the most tightly constrained place I've worked was a swiss bank (horrendous) even more than a UK government agency, my personal experience of working in such a plant is that there is a lot more diligence than your usual business workplace and that the office is very much separate from the station. You never need (and need is key) to copy files from without for instance, (no Windows behind the curtain). The budgets are much bigger and due to being very process heavy, deadlines are theoretical minima only, certainly management are not as you describe. Generally staff were very highly educated, very security conscious and in absolutely no hurry. I felt the comment was blaming in that they would serve as an example and that that would be okay as they were at fault somehow. We do not know the infrastructural constraints in terms of legacy software with regard to whether they can safely take patches and it is unrealistic to expect large organisations such as Maersk to be able to do so automatically in my view. Having some small inkling into the matter, I feel that people must be arguing from a point of ignorance to suggest otherwise. I have even seen these script kiddie fans cry 'patch your shit' as if it is okay to release malware to global scale companies and they are somehow absolved from blame. It certainly is not.