They may also be dealing with old / proprietary tech stacks—due to regulatory, industry, or security realities—that make using modern standards very cumbersome / impossible.