At one time I felt like you do, but I have learned that any system that is heavily bureaucratic, as the military is you have the same things happening. It's not that the people running the military are stupid. They happened to be very good at what they do. They were put in their positions because there are very good at making war and the thing directly related to that purpose. They were not put there because they are good managers or good network admin. The organization in its self is also partially to blame. Things tend to work in a chain for military, to the point of being a micromanaged hell. Say you have a list of thing to get done. This list has millions of things on it starting at get bin Laden and ending at CGI security. Chances are that until CGI security gets bumped up a few thousand places it will get pushed forward a few years.
Another thing you need to be aware of is that the military follows the highest from of network security. If you want your network to be secure do not make it externally available. If you wanted to get secrets from the military, or any branch of the government for that matter, you need to break into a facility and find a terminal that has a red sticker on it marked secret. Occasionally some idiot will put classified information on an unclassified workstation, but this does not happen very often and when it happens that person is punished accordingly. On the other had server security is entirely a different matter. You do not want a hacker owning a your server.