I think it might have to do with different teams in google having different views about how security on their different projects might have different needs.

- Letting each team have their own policy is a good idea because it allows the people who built it ; to protect it.

- The only people who notice are those who are over thinking it.