The controls are agreements that make getting caught doing the unauthorized act painful enough that it might be enough to deter the act in the first place.

If the price is high enough, bad actors will be willing to breach NDAs/CDAs/licensing agreements/etc, but at least then you can be seen as having done more than zero.

Might have been prudent here.