The root of the problem is IT has no incentives or checks in place to maintain a reasonable level of productivity. Their only mission is to make sure that services are online and there aren't breaches. Productivity doesn't factor in at all.

I'm not in a regulated industry (enterprise software). I completely get this if it's healthcare or defense. But we are just talking about middleware here!