Same reason why it took companies very long until they were ready to accept OSS. "But who can we sue if something doesn't work?" - at the end of the day it's always about someone being responsible. And if people can make sure that that someone is not them they will often take that option.