Any software precludes security reviews in defense work. My group wanted mediawiki to run an internal wiki behind the firewall and it took 18 months to pass and my boss had about a dozen meetings and countless emails. There are cases where a developer had to write code in word because he couldn’t get a text editor (allegedly I didn’t actually witness it). When your network is constantly under state sponsored attack these precautions aren’t pointless. But it takes a company like Microsoft or IBM to be able to work with security reviews and get them through quickly.