Governance, Risk and Compliance. Even if the private sector does GRC better than the government, they (the gov't) at the very least have control. Not to mention their stack appears to be mostly open source (Docker, CF, etc). This makes total sense and is a "best of both worlds" approach.