A lot of those things happens because nobody especially not the junior accountants and paralegals doing the compliance audit understand security making a lot of

A lot of those things happens because nobody especially not the junior accountants and paralegals doing the compliance audit understand security making a lot of non tech savy companies buy into expensive tools(triggering the sunk cost fallacy) based on what the salesdrones told the CEO/CIO/CSO over lunch and the shadier the product the better the sales team tend to be at hoodwinking customers using scare tactics into adopting their special spyware source just in case. I would also personally be pushing back using every venue open to me on this kind of behaviour but's it is often more a sign of incompetence then malice.