The legal team would have reviewed the TOS but they probably weren’t looped in when some PM got the idea to use the certificate for this purpose.

In my own experience people often avoid consulting legal when they think they can get away with it (or don’t realize they need to), although I’m sure it varies a LOT based on company culture.