Historically, businesses were understood to also have responsibility to their communities and customers. Also their workers, though perhaps that began to shed somewhat less recently.
In my view, any person or entity is morally responsible for their impacts on others.
So, I believe companies should, indeed, have moral standards.
...
That said yes this is a cultural shift so by no means any kind of immediate solution, and there will always be bad actors, so yes totally agree, fix the policy!
But let's not support a business culture where being a bad actor is cool- it makes the already very difficult job of appropriate regulation that much harder.