Great! Ignore security until the government pays for it.
That is really the wrong way around. It invites to make things insecure in first place, since the government will pay for the security.
It should be: Rigorous oversight when letting them fix the blunders with their own money + pay for the oversight on top.