The mandates are often things you don't see as a citizen, but often on government contractors (a huge part of the US economy).

The number of RFCs that are required for basic things like email, storage, security etc are essential standards primarily because USG required contractors and vendors to adhere to those standards.