Having worked in IT for many years, bosses only hear the "it can be done" part and never the "but we should add these precautions" or "but we should follow these best practices"
Those translate to "those developers want to add unnecessary extra costs" to them.