Did you see other comments in this thread, for example someone bought a drive online and turned out it still had some backblaze data?
Compliance often has a bunch of useless checkboxing, but in that case it really mattered.
I heard a rumor that some companies had their backups "in the other tower". People won't be making that mistake again.
In some places they have a policy against two key people being on the same plane. It's ridiculous, until it isn't.
Obviously there are priorities. But you can't say "I need to add features, not unit tests, because the company will go under without these features implemented very soon, and therefore unit tests are close to useless".