Only because of company culture, in most enterprise projects I work on, doesn't matter the stack, everything gets legal and IT approvement into the internal Nexus.

Devs might do whatever they feel locally, however if those files are going through CI/CD their dependencies better be in Nexus.