i think policies like this are related to insurance. Like the business insurance agreement dictates all access will be removed asap once a person is no longer an employee of the company. Something like that. It's not a "i don't trust this person so immediately lock their account" kind of situation.