Microsoft convinced the CIO that they can't meet regulatory requirements unless everything is recorded and under central compliance records management.

Not secretly punished. Punished for secretly using a non-compliant tool.

This is very common anywhere that handles sensitive info.