They should be run by the government and answer to the users as public servents not allowed to commit fraud.
Not as a private enterprise where they consider any profit from whatever source is good.
The gov cannot supervise anybody from the position they are in.
