Maybe from your experience with one agency/department but the DoD is a BIG organization. But it's still a thing in most federal agencies. Some not as bad as the others.
I'd love to see some data on FOSS usage across the DoD but that type of audit is likely impossible.