probably the contractor expected they could keep the codebase confidential in case customer decides to swap contractors.