Multi-party controls and generally complex technical controls add minimal overhead relative to benefit in large organizations working on static systems; they're horrible in small companies working on rapidly changing products. (Imagine a tiny startup where you have a 4 week change control process for every modification...)