This isn't that uncommon for many technologies, people and especially organizations who are procuring software look for signals that can offload perceived risk. These signals can be things as small as the formation of a company at all, or other ongoing partnerships which shows more social trust. Whether or not the company or provider is actually safe is a different conversation though.