The difference is that it's easy to have "a private org can set its own logically inconsistent policy" (and every possible policy except "everything is allowed" is logically inconsistent) but impossible to have "we will only allow universally agreed upon good things in this space".