overruns on a cost-plus contract are the procuring agencies fault, not the contractor.
there is a thing called "oversight". cost plus contracts have to be managed. if they are not making progress, you stop paying them.
"cost plus" means "agile". if you knew all the requirements (and they were viable), it would be firm fixed price.