Middle-managers don’t give a shit. Most of the time, nothing happens. Devs use whatever they know or can understand easiest while matching requirements. Enforcement depends on discovery, and there can be a high bar for discovery. Correction depends on enforcement, and there can be an even higher legal bar for enforcement.