I’ve seen that too, but having a whole separate instance gives the users a more flexible environment. There’s also the issue of discoverability... sometimes the company doesn’t want employees and vendors to know that certain relationships exist.
And you can federate the two slack instances as well as a separate firewall without having to create multiple accounts for the same users to access multiple instances.