Business have full control. They control the relays. What's a key without read/write access to the business's internal relays?

Keep in mind this is BYOID, the bring your own aspect being something businesses actually want (often for legal reasons), they just want it to work better. For other forms of BYOID, such as a frontline worker using their own Google account to login to the company's slack, the company does not have control over that user's Google account and that's fine, it's the application or infra layer where control resides.

The real question is not why nostr keys for comapnies but why redundant websocket relays for companies