I was absolutely flabbergasted that they didn't even white-label the third party stuff behind their own .gov domain, which means they're mis-training users towards "It's normal to hand over extremely sensitive official information to vaguely-plausible-looking companies with websites and certificates ultimately under the control of Montenegro."
I doubt any conventional web user knows or cares that “.me” is a ccTLD, or that it’s even related to Montenegro. If anything the reaction is “you don’t need a .com!?”
