Organizations are not run by a single person. Imagine yourself as an investor into a large organization. Or you are invited to work as a CEO. You would definitely want to limit your own responsibility (in terms of financial losses or legal costs) when there are hundreds or thousands of people working together and anyone can make a mistake.

Of course you'd have compliance department to look over the processes to minimize the risk of mistakes and correct them ASAP (if you don't, you'd be liable for negligence and open yourself to a higher chance of failures). But since mistakes and miscommunication is inevitable anyway, you'd require hard limits in every obligation - in terms of time, money, scope etc.

Organizations that are not protecting themselves do not live long. And this principle has nothing to do with the nature of their activity.

Even in the year of 2026 not everyone is dumb enough to record themselves committing crimes and then brag about it online.