I think the difference you're getting at has a lot to do with the approach of US vs European regulators. The US is far more "check the box" focused whereas Europe tends to look to the spirit of compliance and the underlying goals of the regulation(s).