If a certificate confers no rights, why does everyone use them?
Because they are cheap, fast and standardized, and because at scale nobody can review full policies for every vendor. That is a reasonable operational compromise as long as it is understood as a screening tool. The moment a certificate is doing real work, for a material vendor or a lease covenant, request the endorsements behind it.