I don't understand how those kinds of numbers get accepted, approved and paid! We built a fairly complex web application for a customer. The total cost including design, development, QA, data migration from a legacy platform + independent 3rd party security audit/pentest was less than $0.5M!

Even if I accounted for the additional capacity to serve a nation of users, I can't imagine the cost being more than $5M.