It was a serious ask to install it from auditors that don’t know what the fuck they are doing. On all ec2 machines for “reasons” I’m sure there are companies out there pushed into doing this because they don’t have people willing to die on those hills.
The issue here is when they get sued into oblivion it doesn’t matter. The damage has been done and the state never goes after their personal riches. Wake me up when the ceo goes to jail or has all their property seized.