Uurgh. This client-of-client-of-client stuff is the enemy of anyone who actually does anything . Even in my line of work - I did the Luas website in 2005 or 2006 when I was freelancing, one guy in a village in Co. Louth doing the actual work at the bottom of a chain of consultants. In phone meetings with people in Dublin and France, none of whom were actually doing anything apart from me.
You explained to me a few months back around the hse cyberhack how that industry works - i didn't respond because i kinda had to think about it for a while. Anywhoo what i ended up thinking is that the entire tech industry is just one big 'not fit for purpose' red stamp environment impossible to clear for health and safety. Like say compared to little bridge being built or something - there are known lookup values for concrete and reinforcements and things, comparitively in tech i kinda got the impression if you built the bridge so that one car makes it across once in front of the correct five people then it is cleared for usage. I know that's over simplifying but that was kinda what i took from it.