Earlier quoted context omitted.
Are you sure they hold sensitive data themselves though? My understanding was they integrate their tools with customers own data and don't have access to it themselves (at least in theory). Of course I agree that quote is insane and you can dislike them for political reasons, but I want to understand the technological fears and see if any are unfounded.
Part of the core offering is data washing.
What are they actually doing for the MoD? Are they reading MoD data out and processing it elsewhere?