I work at such a firm with constantly changing legislative and organizational requirements, and while there is definitely a lot of moving target syndrome around

I work at such a firm with constantly changing legislative and organizational requirements, and while there is definitely a lot of moving target syndrome around business processing logic that this applies to, there are other things like a byzantine service architecture leading to people having to make web service calls rather than join across tables, a house of cards docker/kong setup that people are afraid to update because it's so difficult to debug, unit tests that take 10 minutes to run even in limited cases because of the poorly written migrations and other unrelated bad architecture/engineering choices. Those things could all be fixed with a very reasonable amount of effort for the productivity boost they'd give, but the technical leadership in the teams that owns those things is not super competent, so they're afraid to make any significant changes because they're not confident in their ability to solve problems that might arise as a result.