Problems of red tape are not limited to only government ,it is function of most large organizations

Plenty of security engineers are constantly frustrated at the lack of security focus in corporate sector, investments are only made when it affects revenue . Even after all the ransomware companies some times do the bare minimum and buying insurance

Government on the other hand cares about security for different reasons, they take it lot more seriously. They don't sacrifice security in the interest of sales.

I would anyday prefer to work for some org where security actually matters not where it is inconvenience

https://www.nytimes.com/2020/12/17/us/politics/russia-cyber-...

Government doesn't care about the security of your personal information, hence why they treat their security engineers with contempt by offering them paltry wages and drowning them in red tape.

Most companies I know treat Security engineers similarly and pay not all that much higher. There is world of enterprise IT outside the silicon valley, the pay is not all the much higher. Despite all the recent threats and ransomware attacks security is not treated as it should be.