There is probably a desire to make commit messages go away after 6 months. I am guessing that the lawyers aren't putting much pressure on engineering teams because nobody has thought to "discover" commit messages in a major case yet (whereas email is routine).