It isn't really that "someone like Debian has to" generally - Debian has to as a large part of their reason for existing is providing a stable, reliable, and predictable system: both in terms of content (code and other assets) and license to use said content. If they aren't picky about these things they are not staying true to their stated aims (and a number of their users would be unhappy).