The real systems that have the shit that you don't want anyone to touch ever, are. There are even measures beyond that to ensure security. However, depending on the lab, they also have a number of programs that need to interact either with researchers not 'behind the fence' or with other branches of the .gov or even with the public. Those get hammered all the time.