> that need to meet stringent security requirements That need to meet overreaching legal compliance requirements, maybe, but this isn't the same as security.

> that need to meet stringent security requirements That need to meet overreaching legal compliance requirements, maybe, but this isn't the same as security. > you've never worked on infrastructure in a large heterogenous environment that grew organically over decades. Or dealt with infrastructure that was grant funded. I should hope you don't need to be an outsider/inexperienced to point out obvious dysfunction. Yes, said dysfunction almost always has very explainable context and causes (organic growth over decades, inconsistent/dependent funding structures, etc.) but neither negate the fact that it is a form of dysfunction, nor should they put it beyond criticism (from inside or out).