I have an obvious question if NS cannot secure systems from an outside contractor what indicates that it can full fill its duty to secure US computer systems ou

I have an obvious question if NS cannot secure systems from an outside contractor what indicates that it can full fill its duty to secure US computer systems outside its own offices? Seems to me we be better at hiring Google for such an office rather than NSA, we might even get better ethics as a side benefit