Doesn't mean the security or the quality is up to spec however. Most of the defence sector people I've worked with pretty much run on procedural knowledge developed independently rather than using their nut or consulting the rest of the industry.
This whole thing has gone wrong before: https://www.wired.com/1998/07/sunk-by-windows-nt/