Could be as simple as "they just whined from their security ivory tower so we just made developers doing actual code and ops doing actual ops do their job".

You want people focused on security, but separate security department all too often just becomes annoyance that doesn't understand business, or architecture, just drops decrees.