Sometimes it is due to using third parties for some portions, and those services needing DNS control but not supporting sub-domain delegation in the custom doma

Sometimes it is due to using third parties for some portions, and those services needing DNS control but not supporting sub-domain delegation in the custom domain options. Why a company running it all themselves would do the same is more of a mystery, though simple not-joined-up-thinking is rather likely.