I pound this a lot here, but open source investment is a security and military matter to the state. Relying on unfunded overworked and frankly exploited programmers for major aspects of security infrastructure is madness.

The US has a billion or ten to spare for this. Billion. With a B. This is an investment that is not just defense, it is an investment in the general economy.

The NSA budget is (maybe) 3.6 billion dollars. A general secure computing base for the American economy is worth at least 3x that.