2/ (Meanwhile, check out the reporting at https://wired.com and https://404media.co, it's good and you can tell they've got good sources.)
It's really bad!
Here's the thing about tech in general, and tech in gov specifically. It's always about people, not the technology.