I don't think I'm combining different things. I think the lack of focus on digital sovereignty is just another symptom of a public sector which still doesn't prioritises IT. Which I think follows my original post about our CPR system reaping what it had sown. I don't think you are wrong, but I think as far as my point on taking digitalisation serious, which I think is a required part of a mature public sector, I think all these lacking areas tell the story of a public sector which used to be the best in the world, but has been far too complacent.

As far as Randers cyber security goes. I imagine it'd be "fun" to do an right of access to documents, on the amount of unique visits their Microsoft Defender has registered to chatgpt.com and claude.ai.

That makes sense. I'd agree that IT isn't prioriteres, unless it's in some project form, the daily operations isn't valued. We see this in how contracts are written, software is basically purchased on a contract and expected to be run that same contract for years. There's very little incentive for operators to provide anything but the bare minimum, because the price is more or less fixed regardless of effort.