I've had some interactions with intelligence/defense. What I've seen indicates that they're very interested in the code that runs on their systems. Audits take months to years.