Likely because of a combination of factors: install base + privacy concerns + governance concerns

Missing one of those factors would make something much less of a threat in practice