If someone forgets to lock their door that suddenly doesn't make it legal to break into their house and steal their shit.

The same principal applies to government sites. If something is poorly secured and adversaries are using it to steal stuff then there are avenues to report it and get it fixed up.

>But the fact these governments making the noise are the ones promoting mandating everyone giving up their information to be then stored so incompetently,

The governments in these cases are bought by the very people you're defending. They're using it as a convenient proxy because they know people like you won't look behind the curtain and see corporations pushing this shit so that they can steal freely and just point elsewhere.