Re: GCHQ and Patches
Because "installing the patches" does not yet work in the world of "desired-state configuration / push a button and it's done" (which is why there is a problem in the first place). It's more planning, financing and dispatching a team of cleaners to clean every single toilet in a rickety building designed by Piranesi. And the toilets may be occupied by beancounters. Or eldritch horrors.
For the second question, a dedicated excellent specialist having fun is better than the pondering titanics of state largesse. If the titanics would even be interested in looking in the first place (they will probably open the case folder on Monday 09:30, just after the daily donut)