While I don’t know this is the case, I can say from experience that in large enterprise organizations compliance departments will and do actively prevent the release of features and even commits if they don’t comply.

While that’s not an excuse for challenging them, I could definitely see a stressed out mid level just trying to make there manager happy and move on with life.