They should, but then it only takes one misconfigured, or misbehaving machine to cause a data breach that, depending on the industry, could be a big headache and cost. At scale, with many employees, the chances of this happening approach 1.
Physical destruction is cheap and effective insurance against this.
Yeah my employer policy is no hard drives are ever left in retired equipment. They get pulled and crushed.