If the government cant handle “online stuff” they can pitch privatization.

It kind of already is privatized. Most of the government’s cyber security efforts are handled by defense contractors.

Nah, hackthebox and many other red team simulation type sites have strict rules of engagement. You’re there to solve a puzzle as defined by hackthebox, not get around the puzzle by hacking hackthebox.