You’re assuming that they keep the audit trails and normal controls functioning.
It would be pretty simple for a few radicals at the top to turn off versioning/verification/protection.
Just don’t check the return codes.
You can’t simply turn off versioning for everything in any modern software company I have ever worked at. There is such a thing as `git blame`.