From the blog post someone else linked, it sounds like they do have this process but it’s just a process it’s not enforced by their control software. So someone has made a change without following the process, and they mention prioritising getting enforcement into their control panel or whatever.