If civic government contractors are anything like military contractors, then many of them haven't even heard of a version control system like Git or SVN – instead, naming file versions manually, like old Word DOC names (utils_b4_final2.cpp). I saw this personally at a major contractor in the last five years.

I don't have high expectations for the care invested in the code.

The bigger problem isn't being pwned in an embarrassing way like this. It's all the successful hacks into government systems which never get spotted or are never discussed at a level where they are likely to motivate positive change.