That's sort of my point. If there isn't aren't independent security researchers who make a stink about security issues thus causing them to be fixed then these government organisations will be the only ones with knowledge.