Comment by shaharsol

Because it's harder to enforce on a team whereas a central service (also as a 2nd security layer) deals with it on behalf of the team/org