For a start "company loves law for the sake of law". The company is operating in (a) a highly regulated environment (b) likely wishes to avoid the fines and adverse publicity associated with non-compliance. Its nothing to do with "loving the law".
But each to their own interpretation I guess.
I don't disagree in principal but...
I called the behavior Redditesque for a reason. Comments portraying regulatory agencies as all-seeing gods ready to smite anyone who dares not display their faith enthusiastically enough let alone materially violate the rules are wildly popular there. Cynical realpolitik takes (e.g. "MHSA will show up and fine you for everything they can while doing nothing to materially improve safety") on regulatory enforcement are very much unaccepted over there. Millennials and gen Z, exactly the people you'd expect to be the most cynical are also over-represented there compared to the general population. So clearly there's some other mechanism at play.
Compliance is a cost center. The Redditesque fantasy of compliance departments overflowing with resources because the company loves law for the sake of law or thinks that going above and beyond makes you less likely to get screwed than just doing what your lawyers tell you the laws says you need to do are just that, fantasy.
Compliance departments get tasked with making the company comply, nothing more, nothing less. And they're mostly given the resources to do that, nothing more nothing less.