When you hire a big company like Microsoft to handle some enterprise function of your business, you have someone who is already certified in whatever regulatory thing you need, and you have someone big enough to sue if they mess up.
I can vibecode Google Drive in a weekend but I can’t vibecode their HIPAA compliance and various certifications.