Technology

Do we think doge.gov has a QA group? Do we think there’s more than two people who review changes?

Idk, I don't work there, nor have I looked into how they're structured. I'm not going to make assumptions though.

I’d bet you company has spent a fair number of years getting to this point

Yeah, we have a bunch of tooling to make all that magic "just work." It runs tests, check the health of deploys (and has a sane failover if it's unhealthy), etc. There's a lot to it, but at the end of the day, if I really want to, I can push and deploy straight to prod w/o anyone else being involved (I'd probably get fired, but I could do it).

The tech stack isn't nearly as interesting as the processes surrounding it.

proper certificate

I assume you're talking about the DB and not the website itself, which is protected by a proper certificate, at least as of Tuesday (that's when the certificate starts being valid). I don't know when the website was launched, so I can't comment on anything before that point, though the domain seems to have been registered since the day after inauguration.

the entire financial information of the United States Government

That's largely public info, no? I don't know what exactly is exposed, but honestly, pretty much all financial information (aside maybe from the military and intelligence) should be public record. If it's not, I'd welcome a breach that exposes it so journalists can look it over and find out what they're trying to hide.