> But sadly, the damage for COVIDSafe was already done in the first few weeks. There was no resuscitation possible.

I (the aurhor) feel similar as well. Interfacing with the media was (and continues) to be the only way problems in Australian IT projects are resolved. The Australian Government needs a Vulnerability Disclosure Policy. I would love nothing more than to be able to deal directly with engineers and have sound knowledge that critical problems will be fixed vs having to interface with the media to get problems resolved.