Why do you suppose all those rules and policies came to be?
1/ Some top-level authority writes down a rule saying “as of 2021, it is forbidden to have red pencils”.
2/ The authority might prosecute one or two cases, but most enforcement is largely farmed out to certification bodies: the lawyers, auditors, inspectors of this world.
3/ No auditor or auditee ever wants to be the first to fall foul of PNCL21 regulations. The expense one would incur of being a test case incentivizes every regulation to be widened in scope, unreasonably, to try minimize risk.
4/ Moreover, there is a purity spiral incentive as an auditor to maintain the illusion you know what you are doing and therefore justify your $500-a-day fee. No widening-of-scope is too much! No one ever got fired for buying IBM, and no one ever got fired for banning pink crayons “just to be safe”, even though no normal person would call them either red or a pencil.
Cylindrical graphite rods stored in the same building as red paint? Audit failure risk. Orange pens on your desk? Audit failure risk. Office within 1000 yards of a stationery shop? Audit failure risk. You are single, own a traditional twig-broom, and you like black cats? Audit failure risk, I say!
Not a huge fan of overly broad CoCs, but they arose because, in fact, that simple rule did not work fine. It repeatedly did not work fine, in many groups engaged in many different endeavors. It worked not fine so badly and so frequently that people got tired of it and started writing out the explicit rules.
There's a lot of parallels between CoCs and sexual harassment rules. At first, it was a shitty free-for-all that was fun if you were part of the getting-away-with-it group but terrible for others. Then people said alright, had enough, we're going to make hard and fast rules against all this bullshit. Those first versions tended to be awful and heavy handed because they tried really hard to be comprehensive and serious about it, which is very well intended, but probably too far in the other direction. What we ended up with is probably vastly better, on average, for all involved. It's not as fun for people who enjoy treating others badly, but a whole lot nicer for everyone else.