Default vendor IDs are removed, changed or disabled except where a documented business reason calls for them; defaults that must exist to own objects or processes, or that patching requires, are switched on only while needed and are otherwise prevented from logging in.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.