In my experience, requirement creep is one thing, but the random reprofiling caused by budget inflexibility across years every
PR is the other major one. If you read the NAO report, pretty much all of QEC variance from MG approval is down to schedule change and associated assumptions rather than requirements creep.
Fix that and you go a long way (by no means all) towards fixing the problem.