Universities are so tricky. If you put up too many roadblocks you wind up with official shit on completely external resources. Which makes it hard to figure out what's legitimate and what's a scam.

But make it too easy, you wind up with CNAMEs to external domains, that expire, get bought and now you have scams running on your .edu.

You just don't have the same ability to do top-down management and requirements that you do with the private sector. Individual researchers will get grants and really drive how things need to get done because they're the ones bringing money in.