This is SOP. The government contracts with lots of small/medium/large companies
SOP - Standard Operating Procedure
It is totally normal for the US to contract out much of its R&D and most of the production. The thrust of this breathless article seems to imply that there is DANGER in doing this.
Yes, the sensitive information needs to be protected but that is true whether for a government employee (military service or otherwise) or civilian contractor.