What's critical about nasa.gov? It's just a marketing facade. Not patching it means nothing.

I'm not saying that NSA did/didn't do X. Just that the above about .gov domains is not a valid argument. Intelligence gathering trumps trivial service to citizens.