They aren't building something from scratch. They probably are just going to make a base image with everything configured in a standard way.

Governments tend to have security standards that differ from most solutions readily available. Not saying this is the case, but it's a possibility.