I’m actually not that shocked. Corporations make weird corporate decisions all the time because they feel as if they’re getting the more professional version or something. They tend to view open source projects as either unprofessional or in some complicated way, actually illegal. Like it’ll turn out that open source isn’t allowed after all.
This is what happens when lawyers who don’t actually know what they’re talking about make recommendations. They don’t know, so they always advise caution. Also they genuinely don’t seem to know the difference between pirated software and open source.
The reason corporation are like that is because the responsibility is with the employee the decided to use the open source tool, when there is another company backing a product, there is someone to hold accountable. Also, there is a support number if shit hits the fan, and guarantee of support long term if the supplier is financial healthy.