Academia is full of things you "should" like data sharing, preregistrations, and all kinds of statements about honesty. However, there is almost no incentive provided for such actions and I wonder how effective the measures are in the first place. It’s like running a company by metrics only. It’s great for management but stifles innovation. At the same time, more rules do not stop truly malicious actors, they will find a workaround anyway.