People could also rip code verbatim from BigCorp's confidential source and try to hide it. It doesn't mean they should have a policy that allows that.