If business depends on robustness of that code - of course they protect it.
> They resist better practices and refactoring
How do you know that they resist "better" practices?
It could be they resist fancy practices that would cause more problems than they would solve.