This is a weird non-article to me. It sounds more just like a CISO policy with SDLC components to provide reasonable guidelines to use the systems they already use and support. If you had a company hosting all of your source code on a private GitLab and you then found out a bunch of people were using the public GitLab, you would be annoyed.
You have to set some guidelines about what people use in very large organizations.