I'm pretty sure, that a lot of these policies are put in place as kompromat. If everyone technically violates policies, everyone can be fired or sued for breaking policies if something goes wrong. Management knows exactly what's going on, but they also know that the company would collapse if everyone actually followed protocol.